Adobe Commerce

Reported Context (3)

CVE-2026-71362 Adobe Commerce and Magento Incorrect Authorization Vulnerability CISA Adds Two Actively Exploited WSO2 and Adobe Commerce Vulnerabilities to KEV Catalog
Magento and Adobe Commerce are software for running online stores. Sansec found attackers exploiting StyleSmuggler (CVE-2026-75650, CVSS 10.0) to run malicious code on those stores’ servers without logging in. LG TV Privacy Concerns, CrowdStrike’s SecOps Push and Cylake’s $245M Raise Lead Security Roundup
Magento / Adobe Commerce: A campaign targeting Magento and Adobe Commerce websites abused Google Tag Manager to load skimming code, retrieved malicious payloads from Stripe customer metadata, harvested payment card Recorded Future Reports 215 Actively Exploited CVEs and Expanding Supply-Chain Threats in H1 2026

CVE (8)

Malware (51)

People (4)

Threat Actors (14)

MITRE ATT&CK (13)

Vendors (35)

Products (62)

Tools (19)

Industries (13)

Countries (10)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.