# Magento / Adobe Commerce 2.4.5: actively exploited

Attackers are using a vulnerability in this version right now. Upgrade immediately.

- Known vulnerabilities: 144 (15 critical, 61 high, 60 medium, 8 low)
- End of life: yes, since 2024-11-25 (release line 2.4.5)
- Data as of: 2026-10-24 23:07 UTC

## Vulnerabilities

| ID | Severity | Actively exploited | Fixed in |
|---|---|---|---|
| [CVE-2026-75650](https://helpx.adobe.com/security/products/magento/apsb26-146.html) | critical | yes | — |
| [CVE-2026-71362](https://helpx.adobe.com/security/products/magento/apsb26-92.html) | critical | yes | — |
| [CVE-2026-103849](https://www.adobe.com/trust/security/products/commerce/apsb26-153.html) | critical | no | — |
| [CVE-2022-35698](https://helpx.adobe.com/security/products/magento/apsb22-48.html) | critical | no | — |
| [CVE-2026-92909](https://www.adobe.com/trust/security/products/commerce/apsb26-153.html) | critical | no | — |
| [CVE-2026-91013](https://www.adobe.com/trust/security/products/commerce/apsb26-153.html) | critical | no | — |
| [CVE-2026-76201](https://helpx.adobe.com/security/products/magento/apsb26-138.html) | critical | no | — |
| [CVE-2026-76200](https://helpx.adobe.com/security/products/magento/apsb26-138.html) | critical | no | — |
| [CVE-2026-48356](https://helpx.adobe.com/security/products/magento/apsb26-73.html) | critical | no | — |
| [CVE-2026-100133](https://www.adobe.com/trust/security/products/commerce/apsb26-153.html) | critical | no | — |

And 134 more with lower severity.

## Notes

- You entered a release line, so this is the result for 2.4.5 itself. Enter the full version (for example 2.4.5) for an exact answer.
- 23 Magento / Adobe Commerce vulnerabilities are still under review and not included in this verdict.

Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/magento/2.4.5 · JSON: https://fixedin.dev/magento/2.4.5.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt