Topic

Magento: news, advisories and analysis

3 articlesUpdated 18 Oct 2026

CyberSecureToday covers Magento across 3 articles published between 13 Sep 2026 and 18 Oct 2026. The coverage includes 3 vulnerability advisories. 3 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Magento most often intersect with Adobe Commerce, E-Commerce Security and BlockStrap, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Adobe Commerce BlockStrap Template Injection Flaw Allows Unauthenticated Storefront Takeover”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Adobe Commerce BlockStrap Template Injection Flaw Allows Unauthenticated Storefront Takeover
A CVSS 10.0 template injection flaw in Adobe Commerce and Magento (CVE-2026-103849) allows unauthenticated remote attackers to execute arbitrary code.
CST Editorial Desk18 Oct 202610 min read
ThreatsCloud & SaaSCritical
Adobe Commerce and Magento Authorization Flaw Exploited to Hijack Checkout Workflows
Adobe and CISA warn of active exploitation targeting CVE-2026-71362 in Adobe Commerce and Magento, enabling unauthenticated manipulation of checkout orders and customer data.
Daniel Okafor25 Sep 202617 min read
ThreatsRetail & E-commerceCritical
Adobe warns of exploited Commerce and Magento RCE — patch CVE-2026-75650 now
Adobe says attackers are exploiting a critical, unauthenticated Commerce and Magento flaw. Merchants should apply the vendor hotfix and rotate exposed secrets.
Priya Raman13 Sep 20266 min read

Latest coverage

Adobe Commerce BlockStrap Template Injection Flaw Allows Unauthenticated Storefront Takeover

Adobe Commerce and Magento Authorization Flaw Exploited to Hijack Checkout Workflows

Adobe warns of exploited Commerce and Magento RCE — patch CVE-2026-75650 now