Magento / Adobe Commerce 2.4.7 Actively exploited

Attackers are using a vulnerability in this version right now. Upgrade immediately.

Known vulnerabilities

117 (12 critical, 52 high)

End of life

No

Data as of

2026-10-24 20:37 UTC

Vulnerabilities

• CVE-2026-75650 critical exploited
• CVE-2026-71362 critical exploited
• CVE-2026-103849 critical
• CVE-2026-92909 critical
• CVE-2026-91013 critical
• CVE-2026-76201 critical
• CVE-2026-76200 critical
• CVE-2026-48356 critical
• CVE-2026-100133 critical
• CVE-2026-92464 critical

And 107 more with lower severity.

• You entered a release line, so this is the result for 2.4.7 itself. Enter the full version (for example 2.4.7) for an exact answer.
• 23 Magento / Adobe Commerce vulnerabilities are still under review and not included in this verdict.

Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.