Critical BlockStrap Flaw Allows Code Execution on Magento Servers
A critical vulnerability (CVE-2026-103849) in BlockStrap impacts Magento and Adobe Commerce platforms, enabling potential arbitrary PHP code execution on e-commerce servers.
Tag
2 results in the archive.
A critical vulnerability (CVE-2026-103849) in BlockStrap impacts Magento and Adobe Commerce platforms, enabling potential arbitrary PHP code execution on e-commerce servers.
BigCommerce informed merchants of data breaches after attackers compromised credentials of third-party Ribon apps to inject malicious scripts into stores, highlighting risks from third-party applications in ecommerce.