Adobe fixes critical Magento zero-day exploited to backdoor servers
Teaser from the source
Adobe has released an emergency fix for CVE-2026-75650, an actively exploited max-severity zero-day vulnerability dubbed StyleSmuggler, that impacts multiple versions of Magento and Adobe Commerce. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerLinked advisories
- CVE-2026-75650Adobe Magento Open Source: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten
- CVE-2026-75650Adobe Commerce: Template-Injection
- CVE-2026-75650Adobe Commerce and Magento — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- CVE-2026-75650Adobe Security Bulletin APSB26-146 — Magento
Affected vendors and products
More on zero-day
Other advisories
- CriticalCVE-2026-114625Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
- CriticalCVE-2026-108398Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951)
- CriticalCVE-2026-104935Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
- CriticalCVE-2026-104286FortiMail unauthenticated file-write zero-day CVE-2026-104286
- CriticalCVE-2026-86950Apple CoreGraphics zero-day CVE-2026-86950
- CriticalCVE-2026-88778Citrix NetScaler ADC and Gateway: two unauthenticated RCE zero-days under active exploitation (CVE-2026-88771, CVE-2026-88772)
- CriticalCVE-2026-87491Chrome zero-day CVE-2026-87491 (V8 OOB write)
- CriticalCVE-2026-85046Chrome zero-day CVE-2026-85046 (V8 type confusion)
Other news entries
- iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18NewsSecurityWeek
- Apple backports CoreGraphics zero-day patches to older iPhonesNewsBleepingComputer
- This is Fine: What NetScaler Zero-Days Tell Us About the New NormalNewsSecurityWeek
- Attackers Exploit Third Arista VCO Zero-Day in Four MonthsNewsSecurityWeek
- Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksNewsThe Hacker News
- Arista patches new VeloCloud Orchestrator zero-day exploited in attacksNewsBleepingComputer
- ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and MoreNewsThe Hacker News
- BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge BugsNewsDark Reading
ID