Urgent: Magento/Adobe Commerce Security Update APSB25-26

Critical Vulnerabilities Patched

On April 08, 2025, Adobe released a critical security patch (APSB25-26) for Adobe Commerce and Magento Open Source. This update addresses important and moderate flaws that could lead to security feature bypass, privilege escalation, and application denial-of-service.

What’s Included in APSB25-26?

This patch contains fixes for 4 Important, and 1 Moderate issues.

Affected Versions:

• Magento Open Source:
  • 2.4.8-beta2
  • 2.4.7-p4 and earlier
  • 2.4.6-p9 and earlier
  • 2.4.5-p11 and earlier
  • 2.4.4-p12 and earlier
• Adobe Commerce:
  • 2.4.8-beta2
  • 2.4.7-p4 and earlier
  • 2.4.6-p9 and earlier
  • 2.4.5-p11 and earlier
  • 2.4.4-p12 and earlier
• Adobe Commerce B2B:
  • 2.4.8-beta2
  • 2.4.7-p4 and earlier
  • 2.4.6-p9 and earlier
  • 2.4.5-p11 and earlier
  • 2.4.4-p12 and earlier

For detailed instructions and more information, visit the official Adobe Security Bulletin: https://helpx.adobe.com/security/products/magento/apsb25-26.html

Don’t Become a Target

These vulnerabilities can lead to serious repercussions—like privilege escalation, application denial-of-service, and bypassing security features. To safeguard your online store and maintain customer confidence, installing the APSB25-26 update immediately is essential.

Reach out to Zynovo today for help with your upgrade requirements and security patch installation. This is your opportunity to enhance performance, strengthen security, and improve the customer experience!