Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]
EPSS 0.01 CVE-2026-103849 Magento Adobe BlockStrap obchod US
Stored Cross-Site Scripting in StockAgile by Novadigits technologies Fri, 09/25/2026 - 17:31 Aviso Affected Resources API y el panel de gestión de StockAgile. Description INCIBE has coordinated the disclosure of seven medium-severity vulnerabilities affecting the API and the StockAgile management dashboard, software for retail stores, e-commerce, and warehouses. The vulnerability was discovered by Miguel Jiménez Cámara.These vulnerabilities have been assigned the following code, CVSS v4.0 base…
EPSS 0.00 CVE-2026-6082 CVE-2026-6083 CVE-2026-6084 CVE-2026-6085 CVE-2026-6086 CVE-2026-6087 CVE-2026-6088 Novadigits technologies obchod ES
Inadequate access control in the Hiperdino REST API Mon, 09/14/2026 - 13:27 Aviso Affected Resources Hiperdino REST API v1.0. Description INCIBE has coordinated the disclosure of a critical-severity vulnerability affecting the Hiperdino REST API, which acts as a bridge for carrying out actions automatically and in real time. The vulnerability was discovered by Jorge Ramos Santana.This vulnerability has been assigned the following code, CVSS v4.0 base score, CVSS vector and CWE vulnerability…
EPSS 0.01 CVSS 9.2 CVE-2026-12258 Hiperdino obchod ES
Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 10.0, CVEs: CVE-2026-75650, Summary: Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability that could result in arbitrary code execution. Adobe is aware of CVE-2026-75650 being exploited in the wild. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:3.1 10.0
KEV ✓ EPSS 0.04 CVSS 10.0 CVE-2026-75650 Adobe Magento obchod FI US IT FR