Foreword
Adobe has released a new security update for Adobe Commerce and Magento Open Source, addressing several critical and important vulnerabilities that could pose serious risks to online retailers. The update, published on 12 August 2025 under Bulletin ID APSB25-71, is assigned a priority rating of 2, meaning that while exploitation has not yet been observed in the wild, administrators should still update as soon as possible.
The latest patch resolves multiple vulnerabilities which, if exploited, could lead to:
Adobe confirmed that no active exploits are currently known, but the severity of the vulnerabilities makes timely patching essential for all affected platforms.
The vulnerabilities affect a broad range of Adobe Commerce, Adobe Commerce B2B, and Magento Open Source versions:
Adobe strongly recommends updating to the latest versions immediately. The patched releases include:
All patches are categorised with Priority Rating 2, which means administrators should apply them at the earliest opportunity to mitigate risk.
The update addresses several vulnerabilities with varying severity ratings:
These vulnerabilities could enable attackers to escalate privileges, access restricted files, bypass security controls, or disrupt services. While some issues require administrative access to exploit, others do not, making the risk of exploitation higher.
If your business relies on Adobe Commerce or Magento Open Source, updating your installation immediately should be a top priority. Delaying the patch leaves your store vulnerable to attacks that could result in data loss, site downtime, or unauthorised access to sensitive information.
Need help with patching your store? Contact us to see how we can help!
.png)
