SessionReaper

Adobe fixed a severe vulnerability called SessionReaper in Magento Commerce and Open Source. The flaw allowed API requests to bypass security, risking full account takeover. Immediate patching is advised.