{"id":11970,"date":"2026-08-13T12:33:58","date_gmt":"2026-08-13T18:33:58","guid":{"rendered":"https:\/\/beaconlab.us\/publicacion\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/"},"modified":"2026-09-29T10:59:09","modified_gmt":"2026-09-29T16:59:09","slug":"alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/","title":{"rendered":"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Affected product(s):<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>Adobe ColdFusion<ul><li>Adobe ColdFusion 2025 Update 11 and earlier versions.<\/li><\/ul><\/li>\n\n\n\n<li>Adobe Commerce \/ Magento Open Source<ul><li>Adobe Commerce:<ul><li>2.4.9-2026-jul and earlier.<\/li><\/ul><ul><li>2.4.8-2026-jul and earlier.<\/li><\/ul><ul><li>2.4.7-2026-jul and earlier.<\/li><\/ul><ul><li>2.4.6-2026-jul and earlier.<\/li><\/ul><ul><li>2.4.5-2026-jul and earlier.<\/li><\/ul><ul><li>2.4.4-2026-jul and earlier.<\/li><\/ul><\/li><\/ul><ul><li>Adobe Commerce B2B:<ul><li>1.5.3-2026-jul and earlier.<\/li><\/ul><ul><li>1.5.2-2026-jul and earlier.<\/li><\/ul><ul><li>1.4.2-2026-jul and earlier.<\/li><\/ul><ul><li>1.3.4-2026-jul and earlier.<\/li><\/ul><ul><li>1.3.3-2026-jul and earlier.<\/li><\/ul><\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>Magento Open Source:<ul><li>2.4.9-2026-jul and earlier.<\/li><\/ul><ul><li>2.4.8-2026-jul and earlier.<\/li><\/ul><ul><li>2.4.7-2026-jul and earlier.<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>2.4.6-2026-jul and earlier.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Adobe Campaign Classic\n<ul class=\"wp-block-list\">\n<li>Adobe Campaign Classic v7:<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>7.4.3 Build 9399 and earlier versions.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">Description<\/h2>\n\n<p class=\"wp-block-paragraph\">A security vulnerability identified as <strong>CVE-2026-17106<\/strong>, named <strong>CopyEscape<\/strong>, has been disclosed that affects the mechanism used by Docker to copy files from a container to the systemAdobe published on <strong>August 11, 2026<\/strong> new security updates for several of its enterprise products, including <strong>Adobe ColdFusion, Adobe Commerce, Magento Open Source, and Adobe Campaign Classic<\/strong>.<\/p>\n\n<p class=\"wp-block-paragraph\">The fixed vulnerabilities include critical flaws capable of causing <strong>arbitrary code execution, privilege escalation, operating system command injection, dynamically evaluated code injection, SQL injection, and denial of service<\/strong>.<\/p>\n\n<p class=\"wp-block-paragraph\">Within the updates, the following seven identifiers stand out:<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-48362 (CVSS 10) \u2013 Adobe ColdFusion OS Command Injection:<\/strong> A remote unauthenticated attacker could exploit the improper neutralization of special elements used within system commands to achieve arbitrary code execution on a vulnerable ColdFusion server.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-48273 (CVSS 9.9) \u2013 Adobe ColdFusion Eval Injection:<\/strong> An attacker with low privileges could introduce manipulated content that is subsequently interpreted by the ColdFusion runtime environment, causing arbitrary code execution.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-71384 (CVSS 9.6) \u2013 Adobe ColdFusion Incorrect Authorization:<\/strong> An attacker located on an adjacent network can exploit the flaw without needing valid credentials and cause a denial-of-service condition on the affected application.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-71362 (CVSS 9.1) \u2013 Adobe Commerce \/ Magento Incorrect Authorization:<\/strong> Successful exploitation could allow an attacker to obtain elevated privileges within the platform and access or modify information that should normally be restricted.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-71398 (CVSS 10) \u2013 Adobe Campaign Classic Incorrect Authorization: <\/strong>corresponds to a critical <strong>incorrect authorization<\/strong> vulnerability that can cause arbitrary code execution on vulnerable Adobe Campaign Classic installations.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-27302 (CVSS 10) \u2013 Adobe Campaign Classic Incorrect Authorization:<\/strong> An improper authorization validation allows a remote attacker without credentials to reach functionalities that subsequently lead to arbitrary code execution.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-48381 (CVSS 9) \u2013 Adobe Campaign Classic SQL Injection:<\/strong> A remote attacker can introduce manipulated content within SQL queries processed by Adobe Campaign Classic.<\/p>\n\n<h2 class=\"wp-block-heading\">Solution<\/h2>\n\n<p class=\"wp-block-paragraph\">It is recommended to install the security updates published on August 11, 2026:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Adobe ColdFusion\n<ul class=\"wp-block-list\">\n<li>ColdFusion 2025 \u2192 2025.0.12<\/li>\n\n\n\n<li>ColdFusion 2023 \u2192 2023.0.23<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Adobe Commerce\n<ul class=\"wp-block-list\">\n<li>2.4.9-2026-aug<\/li>\n\n\n\n<li>2.4.8-2026-aug<\/li>\n\n\n\n<li>2.4.7-2026-aug<\/li>\n\n\n\n<li>2.4.6-2026-aug<\/li>\n\n\n\n<li>2.4.5-2026-aug<\/li>\n\n\n\n<li>2.4.4-2026-aug<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>\u2022 Magento Open Source\n<ul class=\"wp-block-list\">\n<li>2.4.9-2026-aug<\/li>\n\n\n\n<li>2.4.8-2026-aug<\/li>\n\n\n\n<li>2.4.7-2026-aug<\/li>\n\n\n\n<li>2.4.6-2026-aug<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Adobe Campaign Classic\n<ul class=\"wp-block-list\">\n<li>7.4.4 Build 9400<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">Additional information:<\/h2>\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/helpx.adobe.com\/security\/products\/coldfusion\/apsb26-90.html\">Adobe Security Bulletin APSB26-90 \u2013 Adobe ColdFusion<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/helpx.adobe.com\/security\/products\/magento\/apsb26-92.html\">Adobe Security Bulletin APSB26-92 \u2013 Adobe Commerce \/ Magento Open Source<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/helpx.adobe.com\/security\/products\/campaign\/apsb26-123.html\">Adobe Security Bulletin APSB26-123 \u2013 Adobe Campaign Classic<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/helpx.adobe.com\/security.html\">Adobe Product Security Incident Response Team<\/a><\/li>\n<\/ul>\n","protected":false},"featured_media":0,"template":"","class_list":["post-11970","publicacion","type-publicacion","status-publish","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"Affected product(s): Adobe ColdFusionAdobe ColdFusion 2025 Update 11 and earlier versions. Adobe Commerce \/ Magento Open SourceAdobe Commerce:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier.2.4.6-2026-jul and earlier.2.4.5-2026-jul and earlier.2.4.4-2026-jul and earlier.Adobe Commerce B2B:1.5.3-2026-jul and earlier.1.5.2-2026-jul and earlier.1.4.2-2026-jul and earlier.1.3.4-2026-jul and earlier.1.3.3-2026-jul and earlier. Magento Open Source:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier. 2.4.6-2026-jul and earlier. Adobe\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"Affected product(s): Adobe ColdFusionAdobe ColdFusion 2025 Update 11 and earlier versions. Adobe Commerce \/ Magento Open SourceAdobe Commerce:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier.2.4.6-2026-jul and earlier.2.4.5-2026-jul and earlier.2.4.4-2026-jul and earlier.Adobe Commerce B2B:1.5.3-2026-jul and earlier.1.5.2-2026-jul and earlier.1.4.2-2026-jul and earlier.1.3.4-2026-jul and earlier.1.3.3-2026-jul and earlier. Magento Open Source:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier. 2.4.6-2026-jul and earlier. Adobe\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-13T18:33:58+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-29T16:59:09+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Affected product(s): Adobe ColdFusionAdobe ColdFusion 2025 Update 11 and earlier versions. Adobe Commerce \/ Magento Open SourceAdobe Commerce:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier.2.4.6-2026-jul and earlier.2.4.5-2026-jul and earlier.2.4.4-2026-jul and earlier.Adobe Commerce B2B:1.5.3-2026-jul and earlier.1.5.2-2026-jul and earlier.1.4.2-2026-jul and earlier.1.3.4-2026-jul and earlier.1.3.3-2026-jul and earlier. Magento Open Source:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier. 2.4.6-2026-jul and earlier. Adobe\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\\\/#listItem\",\"name\":\"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\\\/Magento and Campaign Classic\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\\\/#listItem\",\"position\":2,\"name\":\"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\\\/Magento and Campaign Classic\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\\\/\",\"name\":\"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\\\/Magento and Campaign Classic - Beacon Lab\",\"description\":\"Affected product(s): Adobe ColdFusionAdobe ColdFusion 2025 Update 11 and earlier versions. Adobe Commerce \\\/ Magento Open SourceAdobe Commerce:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier.2.4.6-2026-jul and earlier.2.4.5-2026-jul and earlier.2.4.4-2026-jul and earlier.Adobe Commerce B2B:1.5.3-2026-jul and earlier.1.5.2-2026-jul and earlier.1.4.2-2026-jul and earlier.1.3.4-2026-jul and earlier.1.3.3-2026-jul and earlier. Magento Open Source:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier. 2.4.6-2026-jul and earlier. Adobe\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\\\/#breadcrumblist\"},\"datePublished\":\"2026-08-13T12:33:58-06:00\",\"dateModified\":\"2026-09-29T10:59:09-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic - Beacon Lab","description":"Affected product(s): Adobe ColdFusionAdobe ColdFusion 2025 Update 11 and earlier versions. Adobe Commerce \/ Magento Open SourceAdobe Commerce:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier.2.4.6-2026-jul and earlier.2.4.5-2026-jul and earlier.2.4.4-2026-jul and earlier.Adobe Commerce B2B:1.5.3-2026-jul and earlier.1.5.2-2026-jul and earlier.1.4.2-2026-jul and earlier.1.3.4-2026-jul and earlier.1.3.3-2026-jul and earlier. Magento Open Source:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier. 2.4.6-2026-jul and earlier. Adobe","canonical_url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/#listItem","name":"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/#listItem","position":2,"name":"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/en\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/en\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/#webpage","url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/","name":"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic - Beacon Lab","description":"Affected product(s): Adobe ColdFusionAdobe ColdFusion 2025 Update 11 and earlier versions. Adobe Commerce \/ Magento Open SourceAdobe Commerce:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier.2.4.6-2026-jul and earlier.2.4.5-2026-jul and earlier.2.4.4-2026-jul and earlier.Adobe Commerce B2B:1.5.3-2026-jul and earlier.1.5.2-2026-jul and earlier.1.4.2-2026-jul and earlier.1.3.4-2026-jul and earlier.1.3.3-2026-jul and earlier. Magento Open Source:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier. 2.4.6-2026-jul and earlier. Adobe","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/beaconlab.us\/en\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/#breadcrumblist"},"datePublished":"2026-08-13T12:33:58-06:00","dateModified":"2026-09-29T10:59:09-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/en\/#website","url":"https:\/\/beaconlab.us\/en\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"en-US","publisher":{"@id":"https:\/\/beaconlab.us\/en\/#organization"}}]},"og:locale":"en_US","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic - Beacon Lab","og:description":"Affected product(s): Adobe ColdFusionAdobe ColdFusion 2025 Update 11 and earlier versions. Adobe Commerce \/ Magento Open SourceAdobe Commerce:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier.2.4.6-2026-jul and earlier.2.4.5-2026-jul and earlier.2.4.4-2026-jul and earlier.Adobe Commerce B2B:1.5.3-2026-jul and earlier.1.5.2-2026-jul and earlier.1.4.2-2026-jul and earlier.1.3.4-2026-jul and earlier.1.3.3-2026-jul and earlier. Magento Open Source:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier. 2.4.6-2026-jul and earlier. Adobe","og:url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/","og:image":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","og:image:secure_url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","article:published_time":"2026-08-13T18:33:58+00:00","article:modified_time":"2026-09-29T16:59:09+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic - Beacon Lab","twitter:description":"Affected product(s): Adobe ColdFusionAdobe ColdFusion 2025 Update 11 and earlier versions. Adobe Commerce \/ Magento Open SourceAdobe Commerce:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier.2.4.6-2026-jul and earlier.2.4.5-2026-jul and earlier.2.4.4-2026-jul and earlier.Adobe Commerce B2B:1.5.3-2026-jul and earlier.1.5.2-2026-jul and earlier.1.4.2-2026-jul and earlier.1.3.4-2026-jul and earlier.1.3.3-2026-jul and earlier. Magento Open Source:2.4.9-2026-jul and earlier.2.4.8-2026-jul and earlier.2.4.7-2026-jul and earlier. 2.4.6-2026-jul and earlier. Adobe","twitter:image":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png"},"aioseo_meta_data":{"post_id":"11970","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-09-29 16:59:02","updated":"2026-09-29 17:49:57","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/en\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/en\/"},{"label":"Alert 2026-89 Multiple critical vulnerabilities in ColdFusion, Commerce\/Magento and Campaign Classic","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-89-multiple-critical-vulnerabilities-in-coldfusion-commerce-magento-and-campaign-classic\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/11970","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/11970\/revisions"}],"predecessor-version":[{"id":11971,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/11970\/revisions\/11971"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media?parent=11970"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}