Home / Mar 20, 2026 / Story
0
#3 BleepingComputer general March 19, 2026 at 20:01 UTC

New ‘PolyShell’ flaw allows unauthenticated RCE on Magento e-stores

By Bill Toulas

AI Summary

A new vulnerability dubbed 'PolyShell' affects all Magento Open Source and Adobe Commerce stable version 2 installations, allowing unauthenticated remote code execution and complete account takeover. The flaw impacts e-commerce stores globally running these platforms.

Relevance score: 90.0/100

# More from March 20