Commerce
No Commerce CVE is in the CISA KEV catalogue.
Tracked since 10 Mar · latest article Mon 26 Oct · RSS
Exploited, by due date
CSV downloadNo Commerce CVE is in the CISA KEV catalogue.
16 articles from 6 outlets since 10 Mar; 3 in the last 7 days.
- Article
- First report
- Official notice
Show as table
Who reported 6 outlets, last 12 months
- SecurityOnline5
- SecurityWeek3
- Security Affairs3
- The Hacker News2
- CISA2
- thezdi.com1
- Sansec links malware campaign to 953 infected online storesSecurityWeek
- Exposed Cairn AI panels reveal attacks on 1,100 targetsSecurityOnline
- AI Agents Target 1,200 Retail Sites in Low Cost Hacking CampaignThe Hacker News
- CISA Flags Critical WSO2 and Magento Flaws Used in AttacksSecurity Affairs
- CISA Warns of Exploited WSO2 and Adobe Commerce FlawsSecurityOnline
- CISA Flags Actively Exploited Critical Flaw in Adobe CommerceCISA · official notice
- CISA Warns of Exploited Magento Flaw Enabling Remote Code ExecutionSecurity Affairs
- CVE-2026-41870: Unauthenticated RCE in Apache NutchSecurityOnline
- CISA Warns of Actively Exploited Magento Flaw Enabling Code ExecutionCISA · official notice
- Adobe and Microsoft Patch 997 Flaws as Exploited Threats Mountthezdi.com
All CVEs in coverage
3How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.