Security researcher Sansec reports that an unpatched vulnerability in Magento Open Source and Adobe Commerce is being actively exploited in the wild. Tracked as StyleSmuggler, the flaw allows attackers to execute arbitrary code on affected servers without authentication. Exploitation began on September 4, 2026, with the advisory published the following day. No patch is currently available.

Which products are affected?

Magento Open Source, Adobe Commerce

What should defenders do?

Until a patch is released, organizations should apply the following defensive measures: restrict administrative access to trusted IPs only; implement Web Application Firewall (WAF) rules to block suspicious payloads targeting Magento; monitor server logs for unusual file creation or execution in Magento directories; enforce strong file permissions and regularly update all Magento extensions and core files; apply the latest security advisories from Adobe/Magento as they are released; and consider temporary platform isolation if active exploitation is detected.

highZero-Day

Unpatched Magento Vulnerability Exploited in the Wild as StyleSmuggler

Sansec reports active exploitation of zero-day affecting Magento Open Source and Adobe Commerce

CyberIntel DeskPublished 24 days agoUpdated less than a minute ago1 min read

Unpatched Magento Vulnerability Exploited in the Wild as StyleSmuggler

Key Takeaways

An unpatched zero-day vulnerability (StyleSmuggler) in Magento Open Source and Adobe Commerce is under active exploitation.
Exploitation began on September 4, 2026, and was publicly disclosed on September 5, 2026.
The flaw allows remote code execution without authentication, potentially leading to server backdoor installation.

Related Security News

criticalZero-Day

Hackers exploit Citrix NetScaler zero-day to deploy web shells

Cybersecurity firms report that attackers are exploiting a zero-day vulnerability in Citrix NetScaler to deploy custom web shells and tunneling malware. The exploitation grants root access, enables credential theft, and facilitates lateral movement into internal networks. Citrix has released patches and security advisories addressing CVE-2026-88772.

BleepingComputerabout 6 hours ago1 min read