Adobe Commerce B2B

Search everything

Mentions · 7d0
Mentions · 30d2
All mentions4
First seenAug 13, 2026
Last mentioned14d ago

Timeline

4 articles · newest first

Critical BlockStrap flaw lets hackers run code on Magento servers

Sansec warns CVE-2026-103849 can run arbitrary PHP on unpatched Magento and Adobe Commerce servers.

BleepingComputerOct 16, 20:00 UTC · 14d agoVulnerabilityCVE-2026-1038493 · 1 read

Blockstrap: Magento and Adobe Commerce RCE (CVE-2026-103849)

Sansec warns of unauthenticated Magento and Adobe Commerce RCE CVE-2026-103849, with no live exploitation seen yet.

Sansec (Magento / e-commerce security)Oct 15, 00:00 UTC · 16d agoVulnerabilityCVE-2026-103849 CVE-2026-75650 CVE-2025-542366 · 1 read

StyleSmuggler (CVE-2026-75650): Frequently asked questions about Adobe Commerce and Magento zero-day

Critical unauthenticated RCE zero-day CVE-2026-75650 (StyleSmuggler) in Adobe Commerce and Magento is actively exploited; Adobe shipped hotfix VULN-39341 on September 7.

Tenable Blogupdated Sep 8, 14:13 UTC · Sep 8, 2026first Sep 8, 14:00 UTC · Sep 8, 2026Exploit / PoCExploited2 sourcesCVE-2026-75650 CVE-2025-54236 CVE-2024-34102+11 · 1 read

Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure

Attackers began exploiting critical Adobe Commerce flaw CVE-2026-71362 (CVSS 9.1) for unauthenticated customer account takeover shortly after patch release.

Security AffairsAug 13, 17:48 UTC · Aug 13, 2026Exploit / PoCExploitedCVE-2026-713621

Related CVEs

by mentions

CVE-2026-756504%10.0
Unauthenticated Template Injection RCE in Adobe Commerce and Magento (CVE-2026-75650)
published Sep 7, 2026Adobe CommerceKEVPoC ×2
CVE-2025-5423695%9.1
Unauthenticated Session Takeover in Adobe Commerce and Magento (SessionReaper)
published Sep 9, 2025Adobe CommerceKEVPoC ×2
CVE-2026-1038491%10.0
Unauthenticated template-injection RCE in Adobe Commerce
published 17d agoAdobe CommercePoC
CVE-2022-2408699%9.8
Unauthenticated RCE via checkout input-validation flaw in Adobe Commerce/Magento
published Feb 16, 2022Adobe CommerceKEV
CVE-2024-34102100%9.8
XXE vulnerability enabling RCE in Adobe Commerce and Magento Open Source
published Jun 13, 2024Adobe CommerceKEVPoC
CVE-2026-7136290%9.1
Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento)
published Aug 11, 2026Adobe Commerce (Magento)KEVPoC

Appears with

Adobe Commerceproduct · 4
Adobevendor · 4
Magento Open Sourceproduct · 4
Sansecorganization · 2
Sansecvendor · 2
Adobeorganization · 1
Tenablevendor · 1
CISAvendor · 1
StyleSmuggler implantmalware · 1
Disrexvendor · 1

Entities are extracted by the model from each article. First seen Aug 13, 2026, last mentioned 14d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.