{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability · updates",
  "home_page_url": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236",
  "feed_url": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236/feed.json",
  "description": "Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API. Added to CISA KEV on 2025-10-24.",
  "language": "en",
  "_pwn": {
    "slug": "adobe-commerce-and-magento-cve-2025-54236",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236/feed.xml",
    "llms": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236/llms.txt",
    "json": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236#2025-10-24-7b752170",
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236#2025-10-24-7b752170",
      "title": "Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability: CISA added CVE-2025-54236 to the KEV catalog (due 2025-11-14).",
      "content_text": "Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability: CISA added CVE-2025-54236 to the KEV catalog (due 2025-11-14).",
      "date_published": "2025-10-24T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    }
  ]
}