Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day
Adobe patched over 170 flaws, including in-the-wild zero-day CVE-2026-75650 (CVSS 10) in Adobe Commerce/Magento enabling unauthenticated RCE and web shell deployments.
88
Malware
StyleSmuggler
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenSep 5, 2026
- Last mentionedSep 8, 2026
Timeline
6 articles · newest firstAdobe Commerce max-severity bug comes under active attack
Attackers are actively exploiting CVE-2026-75650 (CVSS 10.0), an unauthenticated RCE zero-day in Adobe Commerce/Magento, deploying a Rust backdoor on e-commerce servers.
92
StyleSmuggler: The Magento Zero-Day Behind New Store Attacks
Sansec reports actively exploited Magento/Adobe Commerce zero-day StyleSmuggler enabling unauthenticated RCE and Rust backdoor installation on fully patched stores since September 4.
85
Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Sansec found attackers exploiting an Adobe Commerce/Magento zero-day (StyleSmuggler) since September 4 to deploy Rust backdoors on online stores.
82
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Sansec reports active exploitation of an unpatched zero-day, dubbed StyleSmuggler, in Magento and Adobe Commerce, letting attackers backdoor online store servers without authentication.
85
StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack
Sansec details actively exploited StyleSmuggler 0-day (CVE-2026-75650, CVSS 10.0) unauthenticated RCE in Magento and Adobe Commerce, patched by Adobe hotfix APSB26-146.
88
Related CVEs
by mentions- CVE-2026-756504%10.0Unauthenticated Template Injection RCE in Adobe Commerce and Magento (CVE-2026-75650)
- CVE-2026-820041%10.0Unauthenticated OS Command Injection in Adobe Campaign Classic
- CVE-2026-482732%9.9Eval Injection RCE in Adobe ColdFusion (CVSS 9.9, low-privileged attacker)
- CVE-2026-757461%9.1SQL Injection Leading to Arbitrary Code Execution in Adobe ColdFusion
Appears with
- Adobevendor · 6
- Sansecvendor · 6
- Adobe Commerceproduct · 6
- Magento Open Sourceproduct · 4
- Magentoproduct · 3
- Sansecorganization · 3
- Adobeorganization · 2
- Magentovendor · 1
- online storesvictim · 1
- Magentoorganization · 1
- Experience Managerproduct · 1
- online merchantsvictim · 1
- Disrex Groupvendor · 1
- ColdFusionproduct · 1
- Campaign Classicproduct · 1
- Acrobat Readerproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.