Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

StyleSmuggler: Unpatched Magento and Adobe Commerce Zero-Day Exploited

SOCRadarby ameer ()2
AI summary · glm-5.3-flashSummaries by Vani AI

Attackers are actively exploiting an unpatched zero-day dubbed StyleSmuggler in Magento Open Source and Adobe Commerce for unauthenticated remote code execution.

A zero-day vulnerability tracked as StyleSmuggler affects Magento Open Source and Adobe Commerce and permits unauthenticated remote code execution. The flaw is unpatched and exploitation is ongoing in the wild. E-commerce stores running these platforms are at direct risk of compromise until a fix is released.

Key facts
  • Unpatched zero-day in Magento Open Source and Adobe Commerce
  • Enables unauthenticated remote code execution
  • Active exploitation observed, tracked as StyleSmuggler
  • Merchants should apply mitigations pending an official patch
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

StyleSmuggler: Unpatched Magento and Adobe Commerce Zero-Day Exploited Attackers are actively exploiting an unpatched zero-day vulnerability in Magento Open Source and Adobe Commerce that allows unauthenticated remote co

SOCRadar

By ameer · socradar.io

Read the full article at SOCRadar

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.