CVE-2026-48356 — Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

Adobe Commerce is affected by a CWE-434 vulnerability allowing unrestricted upload of a file with a dangerous type. The source reports a successful-exploitation signal and an 80% vendor-report confidence of successful exploitation from CISA KEV.