criticalCVE
Critical BlockStrap Flaw Affects Magento and Adobe Commerce Servers
CVE-2026-103849: Arbitrary PHP Code Execution Risk Identified
Cyber.TechVoid1 min read
Key Takeaways
- A critical vulnerability (CVE-2026-103849) has been identified in the BlockStrap extension for Magento and Adobe Commerce.
- The flaw could allow arbitrary PHP code execution on affected store servers.
- Successful exploitation may result in full server compromise, data theft, and lateral movement.
- No official patch has been confirmed at this time; users should apply available security updates from Adobe immediately.
Related Security News
criticalZero-Day
Ivanti Warns of Actively Exploited Zero-Day in Connect Secure
Ivanti has issued an urgent advisory regarding a zero-day vulnerability in Ivanti Connect Secure (ICS) that is being actively exploited in the wild. The company is urging all customers to apply the available patch immediately to prevent unauthorized access to affected systems.
BleepingComputer1 min read
highCVE
Palo Alto Networks PAN-OS RCE Zero-Day Exploited in Real-World Attacks
Palo Alto Networks has released security updates to address a high-severity remote code execution vulnerability in PAN-OS, tracked as CVE-2026-0322. The flaw has been exploited in attacks targeting firewall devices. The company has urged administrators to apply the latest software versions to mitigate the risk of compromise.
BleepingComputer1 min read
