Search: “apsb26-92”

Adobe security advisory (AV26-808) – Update 1

Canada's Cyber Centre updated Adobe advisory AV26-808 to flag that CVE-2026-71362 in Adobe Commerce is being exploited in the wild.

The Canadian Centre for Cyber Security advisory AV26-808 (Update 1) lists vulnerabilities affecting Adobe products including Campaign Classic, Adobe Commerce, Magento Open Source, ColdFusion 2023/2025, Lightroom Classic, and Content Credentials SDKs. Update 1 notes that open-source reporting indicates CVE-2026-71362 is being exploited in the wild. Users and administrators are urged to review the referenced links and apply updates, including those in Adobe bulletin APSB26-92 for Adobe Commerce.

Canadian Centre for Cyber Security·updated Sep 16, 16:06 UTC · 11h ago·first Sep 10, 16:03 UTC · 6d agoAdvisory in the wild 14 sourcesCVE-2026-71362

Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure

Attackers began exploiting critical Adobe Commerce flaw CVE-2026-71362 (CVSS 9.1) for unauthenticated customer account takeover shortly after patch release.

Sansec blocked the first exploitation attempts of CVE-2026-71362 immediately after Adobe published its advisory. The flaw lets unauthenticated attackers switch a customer session to another customer account, hijacking accounts and accessing private data without credentials, admin privileges or user interaction. It affects Adobe Commerce, Commerce B2B and Magento Open Source versions through the July 2026 patches, and Adobe issued isolated patch files APSB26-92 fixing seven vulnerabilities, including stored cross-site scripting and authorization issues.

Security Affairs·Aug 13, 17:48 UTC · Aug 13, 2026Exploit / PoC in the wildCVE-2026-71362

Unauthenticated file upload in Amasty Order Attributes for Magento

Sansec (Magento / e-commerce security)·Jun 15, 20:13 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2026-53787

Critical vulnerability in Mirasvit Cache Warmer for Magento

Sansec (Magento / e-commerce security)·May 26, 14:39 UTC · May 26, 2026Vulnerability in the wildCVE-2026-45247

CosmicSting attack threatens 75% of Adobe Commerce stores

Sansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability in the wildCVE-2024-34102CVE-2024-2961CVE-2026-75650

Unpublished security flaws (0days) massively exploited

Sansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability in the wildCVE-2026-75650

Adobe patches critical Magento admin takeover via menu injection

Sansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability in the wildCVE-2025-47110CVE-2026-75650

Backdoor found in Webgility

Sansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Malware in the wildCVE-2026-75650

Hackers breached Magento through helpdesk

Sansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Data breach in the wild