Vulnerability

CVE-2025-54236

In 3 briefs, most recently 24 October 2025. RSS for this tag

Published 2025-09-09

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

Adobe Commerce and Magento Improper Input Validation Vulnerability.

Added 2025-10-24

Coverage in DanSec Daily

  1. Toys R Us Canada data breach, Collins Aerospace airport check-in disruption, and Lazarus Group's Operation DreamJob against European defense firms.
  2. Magento/Adobe Commerce SessionReaper (CVE-2025-54236) mass compromise, MuddyWater Phoenix backdoor campaign, and SharePoint ToolShell exploitation by Chinese …
  3. Plex data breach, Adobe's SessionReaper Magento flaw and SAP NetWeaver criticals.