Template-injection

3 posts tagged with “Template-injection”

BREAKING: New no-login code execution bug in Magento and Adobe Commerce (CVE-2026-103849)
cveadobe-commercemagento

BREAKING: New no-login code execution bug in Magento and Adobe Commerce (CVE-2026-103849)

How to fix CVE-2026-103849: upgrade Adobe Commerce or Magento Open Source to the 2026-oct build for your line (APSB26-153), and keep September's VULN-39341 hotfix in place.

Oct 13, 2026
Read
BREAKING: CVE-2026-75650 lets unauth callers run code on Adobe Commerce and Magento
cveadobe-commercemagento

BREAKING: CVE-2026-75650 lets unauth callers run code on Adobe Commerce and Magento

How to fix CVE-2026-75650: apply Adobe hotfix VULN-39341 from repo.magento.com, then rotate the Commerce encryption key and every credential it protected

Sep 7, 2026
Read
BREAKING: CVE-2026-75650 is unauthenticated RCE in Adobe Commerce and Magento, already exploited
cveadobe-commercemagento

BREAKING: CVE-2026-75650 is unauthenticated RCE in Adobe Commerce and Magento, already exploited

How to fix CVE-2026-75650: apply Adobe hotfix VULN-39341 for Adobe Commerce / Magento Open Source, then rotate the encryption key and all protected credentials

Sep 7, 2026
Read