Adobe patches critical Magento zero-day exploited in attacks

A maximum-severity zero-day vulnerability called StyleSmuggler affecting Magento and Adobe Commerce was actively exploited starting September 4, 2026, to deploy Linux backdoors. Adobe released emergency patches (CVE-2026-75650) on September 8 after a three-day window of exposure.

CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento # CVE_2026_75650 # AdobeCommerce https://www. akamai.com/blog/security-resea rch/2026/sep/cve-2026-75650-stylesmuggler-adobe-

⚪️ Hackers Exploit StyleSmuggler Vulnerability in Magento and Adobe Commerce 🗨️ Researchers at Sansec have warned that attackers are actively exploiting the critical StyleSmuggler vulnerability in Ma

Google patches sixth actively exploited Chrome zero-day of 2026

Google patched CVE-2026-85046, a V8 type confusion vulnerability in Chrome that has been actively exploited in the wild and affects 3 billion users. This is the sixth actively exploited Chrome zero-day patched in 2026, with the U.S. federal deadline for patching set for September 18.

Magento StyleSmuggler RCE: Report Poisoning to Code Execution https:// fortbridge.co.uk/research/styl esmuggler-magento-unauthenticated-rce/

Adobe Commerce zero-day exploited in the wild (CVSS 10)

Adobe disclosed CVE-2026-75650 on September 8, 2026, a critical template-engine vulnerability (CVSS 10) in Adobe Commerce and Magento allowing unauthenticated remote code execution. The flaw is being actively exploited in the wild, requiring immediate patching across affected systems.

Hackers are actively exploiting the critical # StyleSmuggler zero-day to compromise Adobe Commerce and Magento stores, with researchers finding Linux backdoors and PHP web shells on affected systems.

⚠️[VULN] StyleSmuggler : une faille critique qui frappe Magento

🔴 EXPLOITED Magento and Adobe Commerce have a max-severity zero-day (CVE-2026-75650). Attackers ran code on stores days before a fix existed. On 2.4.4-2.4.9? Patch, then hunt: the hotfix won't evict

🔴 EXPLOITED Magento and Adobe Commerce have a max-severity zero-day (CVE-2026-75650). Attackers ran code on stores days before a fix existed.

The flaw, dubbed StyleSmuggler, lets any unauthenticated attacker run code on a Magento or Adobe Commerce server and plant a persistent backdoor. No login required! One hundred eleven thousand stores,

🏆 New Achievement! Cart Before the Hearse! QUEST UPDATE — OBJECTIVE FAILED. Prerequisites: "Have a Magento store that isn't actively on fire." Status: incomplete. A threat actor dubbed StyleSmuggler

The StyleSmuggler attack is already live in the wild, and your customers' data is the loot drop. This mechanic cannot be skipped. The only available action in your hotbar is: patch Magento 2 and Adobe

The Rules-Based Nuclear Bomb https://www. nakedcapitalism.com/2026/09/th e-rules-based-nuclear-bomb.html

The Rules-Based Nuclear Bomb https://www.

Microsoft breaks patch record with 974 critical updates

In September 2026, Microsoft released 974 CVE patches in a single Patch Tuesday cycle, breaking the company's previous vulnerability update record and reflecting an unusually intense security threat environment. Adobe also contributed significant patches to the same cycle.