importantSYS.SOURCE: The Hacker News• 2026-09-08T14:43:47+05:30

Adobe Addresses Critical Magento Zero-Day (CVE-2026-75650) Used for Rust Backdoor and PHP Web Shell Deployment

#vulnerability #web security #php #rust #magento

Adobe has released security patches for a critical zero-day vulnerability (CVE-2026-75650) in Magento and Adobe Commerce, actively exploited to deploy a Rust-based backdoor and PHP web shell. The U.S. CISA added the flaw to its Known Exploited Vulnerabilities catalog, mandating federal agencies to apply fixes by September 11, 2026.

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild.

The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler by Sansec, which discovered zero-day exploitation starting September 4, 2026.

"This update resolves a critical

Read original article

*** END OF TRANSMISSION ***

> CISA ADDS CRITICAL VULNERABILITIES IN COLLABORA ONLINE AND ARISTA VELOCLOUD TO KEV LIST > SAMSUNG TV REVERSE ENGINEERING REVEALS ON-BOARD AI AUDIO MONITORING CAPABILITIES > OBS STUDIO 33.0.0 RELEASE: CEF UPGRADE AND PLUGIN SYSTEM OVERHAUL > PERFORMANCE COMPARISON OF FUNCTIONAL PROGRAMMING LANGUAGES WITH C IN DEFLATE COMPRESSION > TECHNICAL ANALYSIS OF BLOCK BLAST'S AD-DRIVEN PLAYER EXPLOITATION MECHANISMS > APPLE SECURITY RESEARCH DEVICE PROGRAM FOR IOS VULNERABILITY RESEARCH > THE EVOLUTION OF DISTRIBUTED SQLITE: 12 YEARS OF INNOVATION AND ECOSYSTEM GROWTH > BANKING APPS EXPAND COMPATIBILITY WITH GRAPHENEOS > STARTUPS' CUSTOMER ACQUISITION STRATEGIES BEYOND VIRAL GROWTH > OPENAI SHIFTS AI TRAINING TO CACHED INTERNET DATA AMID SECURITY CONCERNS> CISA ADDS CRITICAL VULNERABILITIES IN COLLABORA ONLINE AND ARISTA VELOCLOUD TO KEV LIST > SAMSUNG TV REVERSE ENGINEERING REVEALS ON-BOARD AI AUDIO MONITORING CAPABILITIES > OBS STUDIO 33.0.0 RELEASE: CEF UPGRADE AND PLUGIN SYSTEM OVERHAUL > PERFORMANCE COMPARISON OF FUNCTIONAL PROGRAMMING LANGUAGES WITH C IN DEFLATE COMPRESSION > TECHNICAL ANALYSIS OF BLOCK BLAST'S AD-DRIVEN PLAYER EXPLOITATION MECHANISMS > APPLE SECURITY RESEARCH DEVICE PROGRAM FOR IOS VULNERABILITY RESEARCH > THE EVOLUTION OF DISTRIBUTED SQLITE: 12 YEARS OF INNOVATION AND ECOSYSTEM GROWTH > BANKING APPS EXPAND COMPATIBILITY WITH GRAPHENEOS > STARTUPS' CUSTOMER ACQUISITION STRATEGIES BEYOND VIRAL GROWTH > OPENAI SHIFTS AI TRAINING TO CACHED INTERNET DATA AMID SECURITY CONCERNS