Low severity2.7NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026

CVE-2025-27192

Description

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
magento/project-community-editionPackagist	<= 2.0.2	—
magento/community-editionPackagist	>= 2.4.7-beta1, < 2.4.7-p5	2.4.7-p5
magento/community-editionPackagist	>= 2.4.6-p1, < 2.4.6-p10	2.4.6-p10
magento/community-editionPackagist	>= 2.4.5-p1, < 2.4.5-p12	2.4.5-p12
magento/community-editionPackagist	< 2.4.4-p13	2.4.4-p13
magento/community-editionPackagist	>= 2.4.8-beta1, < 2.4.8-beta2	2.4.8-beta2

Affected products

112

Adobe Inc./Commercecpe-rescue65 versions
0+ 64 more
- (no CPE)range: 0
- cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*range: <2.4.4
- cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*range: <1.3.3
- cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.5:p9:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.5.1:-:*:*:*:*:*:*
ghsa-coords2 versions
pkg:composer/magento/project-community-edition pkg:composer/magento/community-edition
<= 2.0.2+ 1 more
- (no CPE)range: <= 2.0.2
- (no CPE)range: >= 2.4.7-beta1, < 2.4.7-p5
Adobe Inc./Magento45 versions
cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*+ 44 more
- cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*range: <2.4.4
- cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p11:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p12:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p11:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*

Patches

Vulnerability mechanics

References

helpx.adobe.com/security/products/magento/apsb25-26.htmlnvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-2r94-wm5v-4prxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-27192ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.176
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000