Critical severity10.0CISA KEVNVD Advisory· Published Sep 7, 2026· Updated Sep 9, 2026
CVE-2026-75650
CVE-2026-75650
Description
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- helpx.adobe.com/security/products/magento/apsb26-146.htmlnvdPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
7- Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 SitesThe Hacker News · Oct 20, 2026
- Microsoft breaks Patch Tuesday record with 974-CVE delugeThe Register Security · Sep 9, 2026
- Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-DaySecurityWeek · Sep 8, 2026
- StyleSmuggler (CVE-2026-75650): Frequently asked questions about Adobe Commerce and Magento zero-dayTenable Blog · Sep 8, 2026
- Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web ShellThe Hacker News · Sep 8, 2026
- CVE-2026-75650 Added to CISA KEV Under Active ExploitationVypr Intelligence · Sep 8, 2026
- CISA Adds Four Known Exploited Vulnerabilities to CatalogCISA Alerts