Magento vendor Fishpig hacked, backdoors added
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-75650 | Unauthenticated Template Injection RCE in Adobe Commerce and Magento (CVE-2026-75650) | 10.0 | 99% | KEVPoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 46.183.217.223 | nwhile, it waits for commands from the C2 server located at 46.183.217.223 (Latvia). Sansec has not detected follow-up abuse via the C |
From the original article
2 min read at sansec.io
Update 2022-09-13 FishPig has confirmed the incident and published a status page . It recommends customers to upgrade and/or reinstall all FishPig modules. Sansec discovered malware in the Fishpig Magento Security Suite and several other Fishpig extensions for Magento 2.
By Sansec Forensics Team · sansec.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.