Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

StyleSmuggler fix: patch the Magento and Adobe Commerce RCE

aikido.dev | advisory | #rce | #zero-day | #patching | #0day | #magento | #e-commerce | #adobe-commerce

Summary

Aikido on StyleSmuggler: an unauthenticated RCE in all current Magento Open Source and Adobe Commerce versions, exploited since September 4 with no vendor patch yet, and its drop-in fixes.
Published
Collected

original ↗

Related coverage

  1. Chamilo LMS... It's raining 0days, hallelujah, it's raining 0days (blog.quarkslab.com)
  2. VMs won't contain cyber-capable agents (blog.trailofbits.com)
  3. ShieldCrash: Windows Defender 0-Day PoC Bypassing ShieldBreak (CVE-2026-69414) Patch (github.com)
  4. FalconFlank: CrowdStrike Falcon Sensor 0-Day Local Privilege Escalation Exploit (github.com)
  5. From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuse (lab.ctbb.show)
  6. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)

back