Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Mass PolyShell attack wave hits 471 stores in one hour

Sansec (Magento / e-commerce security)by Sansec Forensics Team ()2 min read2 · 1 read
Analyze CVE-2026-75650 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-75650
Unauthenticated Template Injection RCE in Adobe Commerce and Magento (CVE-2026-75650)
10.099%KEVPoC ×2
KEV

From the original article

2 min read at sansec.io

Sansec is tracking a mass exploitation wave of the PolyShell vulnerability that hit hundreds of online stores within a single hour today. The attacks are ongoing: new victims appear every minute. None of the compromised stores are Sansec customers.

Sansec (Magento / e-commerce security)

By Sansec Forensics Team · sansec.io

Read the full article at Sansec (Magento / e-commerce security)

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.