Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Linked advisories
- CVE-2026-75650Adobe Magento Open Source: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten
- CVE-2026-75650Adobe Commerce: Template-Injection
- CVE-2026-75650Adobe Commerce and Magento — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- CVE-2026-75650Adobe Magento: Mehrere Schwachstellen
- CVE-2026-75650Adobe Security Bulletin APSB26-146 — Magento
Affected vendors and products
More on Zero-Day
Other advisories
- Highpwn_watch:d-link-dgs-3130-ddp-firmware-zero-days-nov-2026D-Link DGS-3130-30TS interim advisory: multiple unpatched DDP and firmware zero-days (SAP10523)
- CriticalCVE-2026-76418Cisco ASA and FTD zero-day CVE-2026-76418 exploited to crash SSL VPN firewalls
- CriticalCVE-2026-114625Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
- CriticalCVE-2026-108398Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951)
- CriticalCVE-2026-111357Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
- CriticalCVE-2026-104286FortiMail unauthenticated file-write zero-day CVE-2026-104286
- CriticalCVE-2026-86950Apple CoreGraphics zero-day CVE-2026-86950
- CriticalCVE-2026-88778Citrix NetScaler ADC and Gateway: two unauthenticated RCE zero-days under active exploitation (CVE-2026-88771, CVE-2026-88772)
Other news entries
- D-Link warns of multiple zero-days in DGS-3130 Series switchesNewsBleepingComputer
- Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-DayNewsSecurityWeek
- Zyxel patches a zero-day hiding behind an old fixNewsCSO Online
- Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command ExecutionNewsThe Hacker News
- Zyxel fixes zero-day exploited to hack nearly 1,000 network switchesNewsBleepingComputer
- Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)NewsRapid7
- Ivanti patches two more Connect Secure zero-days chained in attacksNewsBleepingComputer
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack ChainNewsSecurityWeek
Source: https://thehackernews.com/2026/09/adobe-patches-magento-zero-day.html
ID