critical CVE-2026-100133, CVE-2026-91013
Adobe Commerce: Cross-site scripting possible
NVD (NIST) reports one vulnerability in Adobe Commerce with severity critical. The stated impact is cross-site scripting. Affected: CVE-2026-100133, CVE-2026-91013. The full description, affected versions and recommended action are available from NVD (NIST).
- CVSS
- 9.3
What this means for you
Attackers can run code in your users' browsers. This mainly affects publicly reachable portals and login forms, where sessions can be taken over.
All 7 advisories for Adobe Commerce
Original source
Insights
More articles
Weekly situation, week 42: 107 advisories, 17 critical
Between 11 Oct and 18 Oct 2026 our sources recorded 107 advisories: 17 critical, 90 high.
Weekly situation, week 41: 99 advisories, 17 critical
Between 4 Oct and 11 Oct 2026 our sources recorded 99 advisories: 17 critical, 82 high.
Weekly situation, week 40: 80 advisories, 16 critical
Between 27 Sep and 4 Oct 2026 our sources recorded 80 advisories: 16 critical, 64 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.