ThreatVectr
Tag

#Magento

3 stories taggedMagento.

An Adobe Commerce storefront dashboard on a desktop, with network traffic visualization showing unauthorized backdoor connections in the admin panel
Vulnerabilities

Magento Zero-Day 'StyleSmuggler' Lets Attackers Backdoor Online Stores

Sansec says exploitation of the unpatched Adobe Commerce flaw began September 4, with no vendor fix yet available.

4 min read
An e-commerce store website displayed on a monitor with shopping cart and customer account pages, overlaid with security breach warning graphics and unauthorize
Vulnerabilities

Attackers are already probing a critical Adobe Commerce flaw that lets them hop into shoppers' accounts

CVE-2026-71362 needs no login, no admin rights and no victim clicks. Sansec says its firewall is already blocking live exploitation attempts despite Adobe seeing none.

3 min read
Illustration: a dimly lit e-commerce warehouse server rack with a single red status LED glowing
Vulnerabilities

CISA Flags Magento Cache Extension Bug as Actively Exploited

CVE-2026-45247, an unsafe deserialization flaw in Mirasvit Cache Warmer, lands in KEV after in-the-wild abuse against Magento storefronts.

3 min read
© 2026 Threat Vectr