> TritonInfoSec News
Home / Sep 06, 2026 / Story
0
#1 The Hacker News general September 05, 2026 at 20:14 UTC

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

By [email protected] (The Hacker News)

AI Summary

Sansec disclosed 'StyleSmuggler,' an unpatched zero-day in Magento Open Source and Adobe Commerce enabling unauthenticated remote code execution on e-commerce servers. Active exploitation was observed starting September 4, 2026, making this a critical threat for any organization running these platforms without an available patch.

Read full article → https://thehackernews.com/2026/09/unpatched-magent…

Relevance score: 88.0/100

# More from September 06

  1. 2
    Google warns of new Chrome zero-day flaw exploited in attacks BleepingComputer
  2. 3
    Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials The Hacker News
  3. 4
    Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code The Hacker News
  4. 5
    Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities The Hacker News
  5. 6
    Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel The Hacker News
  6. 7
    39 New Methods That Compromise Passkey Authentication BleepingComputer
  7. 8
    Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain BleepingComputer
  8. 9
    Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites SecurityWeek
  9. 10
    US offers $10 million for info on Iranian allegedly behind cyberattacks on critical infrastructure The Record