Serial number: AV26–697 Date: July 14, 2026 Updated: October 27, 2026 On July 14, 2026, Adobe published security advisories to address critical vulnerabilities in the following products: Adobe After Effects - version 25.6.5 and prior Adobe After Effects - version 26.2.1 and prior Adobe Animate 2023 - version 23.0.15 and prior Adobe Animate 2024 - version 24.0.13 and prior Adobe Audition - version 25.6.4 and prior Adobe Audition - version 26.0 and prior Adobe Bridge - version 15.1.5 (LTS) and…
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]
Insecure deserialization in the TrueLayer Magento 2 plugin Tue, 10/06/2026 - 10:47 Aviso Affected Resources TrueLayer Magento 2 Plugin, versions 2.4.0 through 2.4.2. Description INCIBE has coordinated the disclosure of a high-severity vulnerability affecting the TrueLayer Magento 2 Plugin, a payment integration plugin for Magento 2. The vulnerability, classified as insecure deserialization, could allow remote code execution by injecting specially crafted PHP objects into the cache backend used…
Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 10.0, CVEs: CVE-2026-75650, Summary: Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability that could result in arbitrary code execution. Adobe is aware of CVE-2026-75650 being exploited in the wild. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:3.1 10.0
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CVE-2026-81963 Microsoft Windows Link Following Vulnerability CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CVE-2026-86218 N-able N-central Static Code Injection Vulnerability These types of vulnerabilities…
A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks to deploy a backdoor. [...]
StyleSmuggler is an unauthenticated RCE hitting Magento and Adobe Commerce, with no CVE and no Adobe patch yet. Aikido already has the fix. Category: Vulnerabilities & Threats