
Adobe Commerce and Magento StyleSmuggler Zero-Day Exploited for RAT Deployment
Attackers use StyleSmuggler flaw to install PSK Agent RAT and maintain remote access on Magento stores.
6 stories, newest first · one card per story

Attackers use StyleSmuggler flaw to install PSK Agent RAT and maintain remote access on Magento stores.

CVE-2026-75650, scored 10.0, was hit September 9–13, 2026, before Adobe’s emergency hotfix, across stores in three regions.

Adobe patched over 170 flaws, including in-the-wild zero-day CVE-2026-75650 (CVSS 10) in Adobe Commerce/Magento enabling unauthenticated RCE and web shell deployments.

Critical unauthenticated RCE zero-day CVE-2026-75650 (StyleSmuggler) in Adobe Commerce and Magento is actively exploited; Adobe shipped hotfix VULN-39341 on September 7.

Attackers are actively exploiting CVE-2026-75650 (CVSS 10.0), an unauthenticated RCE zero-day in Adobe Commerce/Magento, deploying a Rust backdoor on e-commerce servers.

Sansec found attackers exploiting an Adobe Commerce/Magento zero-day (StyleSmuggler) since September 4 to deploy Rust backdoors on online stores.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views