CISA adds exploited WSO2 and Adobe Commerce flaws to KEV, with federal agencies told to apply fixes by September 27, 2026.

Magento zero-day vulnerability CVE-2026-75650 exploited a fully patched store for three days before Adobe released APSB26-146 on September 7. A self-updating Rust backdoor survived the patch, evaded ...

Sansec says attackers exploit an unpatched Magento and Adobe Commerce flaw to run server code without authentication and install persistent backdoors.

Adobe launched a cloud product suite for retail and ecommerce technology services on Monday. The Adobe Commerce Cloud is the fourth Adobe cloud offering, joining the Experience, Advertising and ...

Adobe has released an emergency fix for CVE-2026-75650, an actively exploited max-severity zero-day vulnerability dubbed StyleSmuggler, that impacts multiple versions of Magento and Adobe Commerce.