Adobe says the vulnerability is being used in attacks targeting Adobe Commerce users.