StyleSmuggler: Unpatched Magento and Adobe Commerce Zero-Day Exploited

Attackers are actively exploiting an unpatched zero-day dubbed StyleSmuggler in Magento Open Source and Adobe Commerce for unauthenticated remote code execution.

A zero-day vulnerability tracked as StyleSmuggler affects Magento Open Source and Adobe Commerce and permits unauthenticated remote code execution. The flaw is unpatched and exploitation is ongoing in the wild. E-commerce stores running these platforms are at direct risk of compromise until a fix is released.

• Unpatched zero-day in Magento Open Source and Adobe Commerce
• Enables unauthenticated remote code execution
• Active exploitation observed, tracked as StyleSmuggler
• Merchants should apply mitigations pending an official patch