← Back to the feed

~/article/unpatched-magento-and-adobe-commerce-zero-day-exploited-to-backdoor-onli-15i4ti

critical2026-09-05 20:14 UTCSource: The Hacker News

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the flaw and named it StyleSmuggler, said attacks started on September 4. "Sansec is

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Topics

zero-day malware

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

Related

~/related/unpatched-magento-and-adobe-commerce-zero-day-exploited-to-backdoor-onli-15i4ti

2026-09-11 16:29 UTC[high]

Artifactory flaws chained in attacks deploying backdoor malware

BleepingComputermalware

2026-09-11 14:10 UTC[info]

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

The Hacker Newsai malware apt

2026-09-11 14:01 UTC[info]

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

BleepingComputerai malware

2026-09-11 12:00 UTC[high]

Ukrainian hacker gets four years in US prison over Conti ransomware attacks

The Recordransomware malware

2026-09-11 11:30 UTC[info]

ClickFix attacks infecting PCs and Macs are going viral

Ars Technicamalware windows

2026-09-11 08:47 UTC[info]

Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion

SecurityWeekai malware