Tag
#StyleSmuggler
Unpatched Magento Zero-Day Exploited: Understanding the StyleSmuggler Threat
Attackers are exploiting a zero-day remote code execution flaw in Adobe Commerce and Magento Open Source, known as StyleSmuggler, to install persistent backdoors on e-commerce sites. This vulnerability is particularly concerning as it affects a large share of mid-market online retail and has been exploited in the wild since September 4, 2026, with no vendor fix available as of September 6, 2026.
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce, known as StyleSmuggler, allowing them to run malicious code on online stores' servers without authentication. Attacks started on September 4, and the flaw was publicly disclosed on September 5. Security professionals should immediately prioritize patching or mitigating this vulnerability.