Research · Sep 7, 2026
Critical Vulnerability Discovered in Adobe Commerce and Magento
A significant vulnerability has been identified in Adobe Commerce and Magento, allowing potential arbitrary code execution without user interaction.
What changed
Adobe Commerce and Magento have been found to contain a serious vulnerability related to the improper neutralization of special elements in their template engine. This flaw could allow attackers to execute arbitrary code within the context of the current user, posing a severe security risk.
The vulnerability does not require any user interaction for exploitation, making it particularly dangerous.
Who is affected
The following products and vendors are impacted by this vulnerability:
Adobe Commerce and Magento users are at risk, particularly those who have not implemented the latest security updates.
- Adobe Commerce
- Magento
- Users of Adobe's e-commerce solutions
What to do
Organizations using Adobe Commerce or Magento should take immediate action to mitigate the risks associated with this vulnerability.
It is essential to apply any available patches and updates provided by Adobe to secure systems against potential exploitation.
- Review and apply security updates from Adobe.
- Conduct a security assessment of your systems.
- Educate users about the risks of unpatched vulnerabilities.