{"id":2734,"date":"2026-09-08T10:38:30","date_gmt":"2026-09-08T10:38:30","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=2734"},"modified":"2026-09-08T10:38:30","modified_gmt":"2026-09-08T10:38:30","slug":"adobe-patches-magento-zero-day-exploited-to-deploy-rust-backdoor-and-php-web-shell","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=2734","title":{"rendered":"Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Sep 08, 2026<\/span><\/span>Vulnerability \/ Web Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe\u202fCommerce and\u202fMagento Open Source that has come under active exploitation in the wild.<\/p>\n

The vulnerability, now tracked as CVE-2026-75650<\/strong> (CVSS score: 10.0), has been codenamed StyleSmuggler by Sansec, which discovered zero-day exploitation starting September 4, 2026.<\/p>\n

\u00abThis update resolves a critical vulnerability that could result in arbitrary code execution,\u00bb Adobe said<\/a>, adding it’s \u00abaware that CVE-2026-75650 has been exploited in the wild targeting Adobe Commerce merchants.\u00bb<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

At its core, the flaw abuses Magento’s template system through PHP code injection to generate a \u00abPayment Transaction Failed Reminder\u00bb email, triggering code execution in the process.<\/p>\n

<\/p>\n

The shortcoming affects the following versions –<\/p>\n