Description
No description available.
Adobe Commerce 输入验证不当漏洞 可导致远程代码执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://helpx.adobe.com/security/products/magento/apsb25-88.html
https://nvd.nist.gov/vuln/detail/CVE-2025-54236
https://thehackernews.com/2025/09/adobe-commerce-flaw-cve-2025-54236-lets.html
https://www.sonicwall.com/blog/nested-deserialization-to-rce-in-adobe-commerce-magento-cve-2025-54236-
https://sansec.io/research/sessionreaper
https://www.tenable.com/plugins/nessus/242970
https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397
https://www.anquanke.com/post/id/312888
https://nullsecurityx.codes/cve-2025-54236-sessionreaper-unauthenticated-rce-in-magento
https://securityaffairs.com/182075/security/critical-flaw-sessionreaper-in-commerce-and-magento-platforms-lets-attackers-hijack-customer-accounts.html