Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day
Teaser from the source
Tracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code. The post Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekLinked advisories
- CVE-2026-75650Adobe Magento Open Source: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten
- CVE-2026-75650Adobe Commerce: Template-Injection
- CVE-2026-75650Adobe Commerce and Magento — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- CVE-2026-75650Adobe Magento: Mehrere Schwachstellen
- CVE-2026-75650Adobe Security Bulletin APSB26-146 — Magento
Affected vendors and products
More on Including
Other advisories
- CriticalCVE-2026-120641CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths
- MediumCVE-2026-123660In Vulnerability-Lookup 5.5.1 up to but not including 6.4.1, a signed-in user could make the server allocate memory far out of proportion to their input thro…
- Not ratedosv:CLEANSTART-2026-ZY17213Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Not ratedosv:CLEANSTART-2026-EQ07538Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Not ratedosv:CLEANSTART-2026-HB11422Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Highpwn_watch:frankenphp-1-13-5-caddy-2-11-9-security-releases-nov-2026FrankenPHP 1.13.5 fixes 17 vulnerabilities, including uploaded files run as PHP; Caddy 2.11.9 fixes FastCGI bypasses
- HighCVE-2026-93389LiteSpeed Cache serves WooCommerce shoppers’ cart and checkout data, including session tokens, to anyone (CVE-2026-93389)
- CriticalCVE-2026-73578Apache OFBiz 24.09.08 fixes 46 CVEs, including unauthenticated RCE and login bypass
Other news entries
- Amplifon Americas Data Breach Impacts 1.3 MillionNewsSecurityWeek
- Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsNewsThe Hacker News
- SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN LoginsNewsSecurityWeek
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacksNewsBleepingComputer
- Technical University of Munich (TUM) IT security incident: myTUM passwords stolen, TUMonline taken offlineBreachpwn.watch
- Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's MemoryNewsThe Hacker News
- Node-RED authentication hole being exploited in the wildNewsCSO Online
- Maru-Jan online mahjong leaks email addresses and passwords of all 1.86 million membersBreachpwn.watch
Source: https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/
ID