CVE-2026-47984 is an Incorrect Authorization vulnerability in Adobe Commerce that enables an attacker to bypass security controls, resulting in unauthorized read and write access. The vulnerability does not require any user interaction and can be exploited remotely over the network. The CVSS 3.1 base score is 8.2, reflecting high impact on confidentiality and low impact on integrity, with no impact on availability. No vendor advisory or patch information is available at this time.

Successful exploitation allows an attacker to bypass security mechanisms and gain unauthorized read and write access to Adobe Commerce resources. This could lead to exposure or modification of sensitive data. There is no indication of availability impact or requirement for user interaction. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor Adobe's security advisories for updates. No specific mitigations are provided in the current data.