Adobe Commerce/Magento "SessionReaper" RCE (CVE-2025-54236)
Severity:
Critical
Summary
A deserialization vulnerability in Adobe Commerce and Adobe Magento allows an attacker to send specially crafted requests that can bypass authentication. This flaw can be combined with file-upload functionality to achieve remote code execution (RCE).
Impact
An unauthenticated attacker can compromise the system.
Remediation
Upgrade to the latest version of Adobe Commerce/Magento
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Related Vulnerabilities
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
