> TritonInfoSec News
Home / Oct 18, 2026 / Story
0
#6 BleepingComputer general October 16, 2026 at 20:00 UTC

Critical BlockStrap flaw lets hackers run code on Magento servers

By Bill Toulas

AI Summary

A maximum-severity vulnerability tracked as CVE-2026-103849 in the BlockStrap component affects Magento and Adobe Commerce, allowing attackers to execute arbitrary PHP code on server infrastructure. Researchers warn exploitation attempts are likely imminent, making this a critical priority for e-commerce operators running affected platforms. Store administrators should apply patches immediately given the combination of critical severity and the historically high attacker interest in Magento-based targets.

Read full article → https://www.bleepingcomputer.com/news/security/cri…

Relevance score: 83.0/100

# More from October 18

  1. 1
    Prolific Chinese espionage group exploits BeyondTrust zero-day CyberScoop
  2. 2
    Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day SecurityWeek
  3. 3
    BeyondTrust patches zero-day exploited in attacks since August BleepingComputer
  4. 4
    Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack BleepingComputer
  5. 5
    Zero-click attacks used targeted ads to deliver Candiru spyware BleepingComputer
  6. 7
    Drupal patches critical RCE flaws, warns exploits may emerge soon BleepingComputer
  7. 8
    Cybersecurity incident at BAE Systems disrupts US bankruptcy court system CyberScoop
  8. 9
    OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract The Hacker News
  9. 10
    F5, Juniper Networks Patch Critical Vulnerabilities SecurityWeek