Backdoor found in Webgility
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-75650 | Unauthenticated Template Injection RCE in Adobe Commerce and Magento (CVE-2026-75650) | 10.0 | 99% | KEVPoC ×2 | KEV |
From the original article
2 min read at sansec.io
Update Nov 23rd : Webgility has released a patch and a public statement , urging all customers to upgrade to version 345. Update Nov 30th : Webgility has discovered another security issue and urges all customers to upgrade to version 346 . The VC-funded Webgility software contains a backdoor for the purpose of remote upgrades.
By Sansec Forensics Team · sansec.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.