APSB25-88 - APSB25-88: Security update available for Adobe Commerce Security Update

Magento Adobe Helpx Adobe Security Bulletin Critical Apsb25 88 Cve 2025 54236

Bulletin Information

  • Bulletin ID: APSB25-88
  • Product: APSB25-88: Security update available for Adobe Commerce
  • Published: September 09, 2025
  • Priority: 1
  • Severity: Critical
  • CVE Count: 1

Affected Versions

  • Adobe Commerce: 2.4.9-alpha2 and earlier2.4.8-p2 and earlier2.4.7-p7 and earlier2.4.6-p12 and earlier2.4.5-p14 and earlier2.4.4-p15 and earlier
  • Adobe Commerce B2B: 1.5.3-alpha2 and earlier1.5.2-p2 and earlier1.4.2-p7 and earlier1.3.4-p14 and earlier1.3.3-p15 and earlier
  • Magento Open Source: 2.4.9-alpha2 and earlier2.4.8-p2 and earlier2.4.7-p7 and earlier2.4.6-p12 and earlier2.4.5-p14 and earlier

Vulnerability Details

Total Vulnerabilities: 1

Severity Breakdown:

  • Critical: 1

Key Vulnerabilities:

1. CVE-2025-54236

  • Category: Improper Input Validation (CWE-20)
  • Impact: Security feature bypass
  • Severity: Critical
  • CVSS Score: 9.1
  • Authentication Required: No

CVE Identifiers

CVE-2025-54236

Read Full Bulletin on Adobe Security Portal →

All Bulletins Magento Bulletins Adobe Helpx Bulletins Adobe Bulletins Security Bulletin Bulletins Critical Bulletins Apsb25 88 Bulletins Cve 2025 54236 Bulletins Home