Adobe fixes critical Magento zero-day exploited to backdoor servers
Teaser from the source
Adobe has released an emergency fix for CVE-2026-75650, an actively exploited max-severity zero-day vulnerability dubbed StyleSmuggler, that impacts multiple versions of Magento and Adobe Commerce. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerLinked advisories
- CVE-2026-75650Adobe Magento Open Source: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten
- CVE-2026-75650Adobe Commerce: Template-Injection
- CVE-2026-75650Adobe Commerce and Magento — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- CVE-2026-75650Adobe Security Bulletin APSB26-146 — Magento
Affected vendors and products
More on zero-day
Other advisories
- Highpwn_watch:d-link-dgs-3130-ddp-firmware-zero-days-nov-2026D-Link DGS-3130-30TS interim advisory: multiple unpatched DDP and firmware zero-days (SAP10523)
- CriticalCVE-2026-76418Cisco ASA and FTD zero-day CVE-2026-76418 exploited to crash SSL VPN firewalls
- CriticalCVE-2026-114625Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
- CriticalCVE-2026-108398Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951)
- CriticalCVE-2026-111357Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
- CriticalCVE-2026-104286FortiMail unauthenticated file-write zero-day CVE-2026-104286
- CriticalCVE-2026-86950Apple CoreGraphics zero-day CVE-2026-86950
- CriticalCVE-2026-88778Citrix NetScaler ADC and Gateway: two unauthenticated RCE zero-days under active exploitation (CVE-2026-88771, CVE-2026-88772)
Other news entries
- November Patch Tuesday boasts over 1,000 bugs but only one zero-day so farNewsThe Register — Security
- November Patch Tuesday: An Overflowing Cornucopia of CVEsNewsDark Reading
- N-able N-central gets emergency fix two days after 33 exploits publishedNewsCSO Online
- Microsoft Fixes Nearly 1,100 Security VulnerabilitiesNewsKrebs on Security
- Exploited Outlook Zero-Day Among 1,094 Flaws Patched by MicrosoftNewsSecurityWeek
- Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-dayNewsBleepingComputer
- Chrome zero-day whack-a-mole continues as 2026 tally hits 8NewsThe Register — Security
- N-able Takes N-central Offline as Researcher Drops Over 30 Zero-DaysNewsSecurityWeek
ID