Back
Platform
Magento
Related CVEs
Recent activity
CyberXero Campaign Targets Ukrainian Records Using AI ToolsCyberXero, a Russian-speaking initial access broker, has launched a dual-pronged campaign targeting WordPress sites and Ukrainian critical infrastructure, leveraging AI tools like …Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 DisclosedOn October 20, 2026, two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed, allowing unauthenticated remote code execution (RCE) on af…Critical PHP Vulnerabilities php2shell Disclosed and PatchedOn October 21, 2026, PHP disclosed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on the CVSS scale. These vulnerabilities allow unauthenticated …Critical PHP Vulnerabilities Prompt Global Website ShutdownsOn October 21, 2026, two critical vulnerabilities in the PHP programming language, identified as CVE-2026-109618 and CVE-2026-109619, were disclosed, allowing unauthenticated remot…Active Exploitation of Magento Zero-Day and Chromium BackdoorsA sophisticated backdoor toolkit named PEEP has been discovered, exploiting browser extensions in Chrome and Edge for command execution post-compromise. Additionally, a zero-day vu…Active Exploitation of Magento Zero-Day Vulnerability 'StyleSmuggler'A new unpatched vulnerability, named StyleSmuggler, has been discovered in Magento Open Source and Adobe Commerce, allowing unauthenticated attackers to execute remote code. The at…PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency PatchesOn October 21, 2026, the PHP security team released emergency patches for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on…Critical PHP Object Injection Vulnerability in Mirasvit Cache WarmerA critical vulnerability, CVE-2026-45247, has been identified in the Mirasvit Full Page Cache Warmer for Magento 2, allowing unauthenticated remote code execution via a crafted Cac…Critical Authorization Flaw in Adobe Commerce and Magento ExposedOn August 11, 2026, Adobe released a security update addressing CVE-2026-71362, a critical Incorrect Authorization vulnerability in Adobe Commerce, Adobe Commerce B2B, and Magento …