Critical BlockStrap Flaw Allows Code Execution on Magento Servers
A critical vulnerability (CVE-2026-103849) in BlockStrap impacts Magento and Adobe Commerce platforms, enabling potential arbitrary PHP code execution on e-commerce servers.
Tag
#Adobe Commerce
2 results in the archive.
CISA Adds Exploited WSO2 and Adobe Commerce Flaws to KEV
CISA added exploited vulnerabilities in WSO2 and Adobe Commerce/Magento to its Known Exploited Vulnerabilities catalog. The WSO2 flaw can permit unrestricted file upload and potential remote code execution; the Adobe flaw can expose sensitive resources through incorrect authorization.