Critical backdoor found in MGT Varnish extension
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-75650 | Unauthenticated Template Injection RCE in Adobe Commerce and Magento (CVE-2026-75650) | 10.0 | 99% | KEVPoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 54.84.48.253 | e code attempts to restrict access to a single IP address ( 54.84.48.253 ), apparently used by MGT Commerce: console-test.mgt.io fee |
From the original article
2 min read at sansec.io
Sansec researchers discovered a critical vulnerability in the popular Varnish module for Magento. This module, developed by MGT Commerce , contains a hidden backdoor that allows remote PHP code execution. The backdoor was likely inserted to enable remote upgrades and debugging support.
By Sansec Forensics Team · sansec.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.