#Adobe Commerce
5 stories taggedAdobe Commerce.

CISA Gives Federal Agencies Three Days to Patch a WSO2 Flaw Already Being Exploited
Two critical bugs are being actively exploited. Federal civilian agencies must fix the WSO2 vulnerability by September 27, and the same urgency applies to any organisation running the affected software.

Magento Zero-Day 'StyleSmuggler' Lets Attackers Backdoor Online Stores
Sansec says exploitation of the unpatched Adobe Commerce flaw began September 4, with no vendor fix yet available.

Attackers are already probing a critical Adobe Commerce flaw that lets them hop into shoppers' accounts
CVE-2026-71362 needs no login, no admin rights and no victim clicks. Sansec says its firewall is already blocking live exploitation attempts despite Adobe seeing none.

Adobe Patches Over 50 Flaws, Tells ColdFusion and Campaign Classic Users to Act Now
Several of Adobe's most widely used business tools carried perfect-ten severity scores this week. Two products have been flagged as likely targets, and Adobe is telling administrators to patch immediately.

CISA Flags Magento Cache Extension Bug as Actively Exploited
CVE-2026-45247, an unsafe deserialization flaw in Mirasvit Cache Warmer, lands in KEV after in-the-wild abuse against Magento storefronts.