Adobe Commerce merchants to be hit with TrojanOrders this season

Sansec (Magento / e-commerce security)by Sansec Forensics TeamApr 14, 2026 · 19:49 UTC (Apr 14, 2026)5 min read2 · 2 reads

Read at sansec.io

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-24086 CVE-2022-240486

Tags: cve-2022-240486 cve-2022-24086 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-24086	Unauthenticated RCE via checkout input-validation flaw in Adobe Commerce/Magento	9.8	99%	KEV	Feb 16, 2022 KEV Feb 15, 2022

From the original article

5 min read at sansec.io

After a quiet summer, the number of attacks targeting the mail template vulnerability in Magento 2 and Adobe Commerce is rising fast. Merchants and developers should be on the lookout for TrojanOrders: orders that exploit a critical vulnerability in Magento stores. The trend in recent weeks paints a grim picture for ecommerce DevOps teams worldwide for the coming weeks.

Sansec (Magento / e-commerce security)

By Sansec Forensics Team · sansec.io

Read the full article at Sansec (Magento / e-commerce security)

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.