Magento

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenSep 5, 2026
Last mentionedSep 25, 2026

Timeline

5 articles · newest first

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

CISA added WSO2 path traversal CVE-2026-5430 and Adobe Commerce authorization flaw CVE-2026-71362 to its KEV catalog amid active exploitation.

The Hacker NewsSep 25, 04:46 UTC · Sep 25, 2026Exploit / PoCExploitedCVE-2026-5430 CVE-2026-713623

Autonomous AI Agents Hack Online Retailers for $25 Per Target, Steal 600,000 Credit Cards

Operator using open-source AI agents Strix, Cairn, and Hermes compromised hundreds of retailers, stealing 600,000+ credit cards at about $25 per target.

GBHackersSep 23, 07:26 UTC · Sep 23, 2026Data breachExploited3 · 2 reads

Autonomous AI Agents Hack Retailers for $25 and Steal 600,000 Credit Cards

Gambit Security details an unsupervised AI-agent campaign using Strix, Cairn and Hermes that breached 27+ retailers and stole 600,000+ credit cards for about $25 per target.

Cyber Security NewsSep 22, 15:51 UTC · Sep 22, 2026Threat actorExploited3 · 2 reads

StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack

Sansec details actively exploited StyleSmuggler 0-day (CVE-2026-75650, CVSS 10.0) unauthenticated RCE in Magento and Adobe Commerce, patched by Adobe hotfix APSB26-146.

Sansec (Magento / e-commerce security)Sep 5, 00:00 UTC · Sep 5, 2026Exploit / PoCExploitedCVE-2026-756505 · 2 reads

Related CVEs

by mentions

CVE-2026-543022%10.0
Unauthenticated JWT Algorithm Bypass in WSO2 API Manager and Gateways
published Aug 6, 2026wso2 api managerKEVPoC ×2
CVE-2026-756504%10.0
Unauthenticated Template Injection RCE in Adobe Commerce and Magento (CVE-2026-75650)
published Sep 7, 2026Adobe CommerceKEVPoC ×2
CVE-2026-7136290%9.1
Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento)
published Aug 11, 2026Adobe Commerce (Magento)KEVPoC

Appears with

Adobeorganization · 3
Cairnorganization · 2
CISAorganization · 2
Gambit Securityorganization · 2
OpenRouterorganization · 2
Strixorganization · 2
Hermesorganization · 2
Sansecorganization · 2
Sansecvendor · 1
WSO2organization · 1
CrowdStrikevendor · 1
SentinelOnevendor · 1
Microsoft Defenderproduct · 1
Halcyonvendor · 1
DeepSeekorganization · 1
Kimiai model · 1

Entities are extracted by the model from each article. First seen Sep 5, 2026, last mentioned Sep 25, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.