Monthly Archives: September 2026
-
- September 09, 2026 - 7 min read
In short: StyleSmuggler (CVE-2026-75650) is an unauthenticated remote code execution (RCE) chain in Magento and Adobe Commerce. First exploitation was observed on 4 September; Adobe assigned the highest priority (1), CVSS 10.0, and names active exploitation directly. Adobe released hotfix VULN-39341 with security bulletin APSB26-146 on 7 September at 20:20 UTC. If your store runs Magento Open Source 2.4.4–2.4.9 or Adobe Commerce 2.4.4–2.4.9 (or B2B 1.3.3–1.5.3) and the hotfix has not been applied, your store is currently exposed.
Recent Posts
