---
id: 7661
title: "“StyleSmuggler” – Adobe Commerce, Adobe Commerce B2B, and Magento RCE (CVE-2026-75650): Overview and Takeaways"
cve: CVE-2026-75650
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/critical-vulnerability/stylesmuggler-adobe-commerce-adobe-commerce-b2b-and-magento-rce-cve-2026-75650/"
published_at: "2026-09-08T00:00:00Z"
tags: ["rce", "template-injection", "magento", "adobe-commerce", "in-the-wild", "patch-now", "cve-2026-75650"]
phying_url: "https://phying.com/item/7661"
lang: en
---

# “StyleSmuggler” – Adobe Commerce, Adobe Commerce B2B, and Magento RCE (CVE-2026-75650): Overview and Takeaways

## Summary

CVE-2026-75650 (CVSS 10.0) lets unauthenticated attackers inject PHP through Magento's email template engine for RCE, with in-the-wild exploitation and Rust backdoors confirmed before the hotfix.

## Intelligence Metadata

- **Sources:** netspi.com
- **CVE:** CVE-2026-75650
- **Published:** 2026-09-08T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/critical-vulnerability/stylesmuggler-adobe-commerce-adobe-commerce-b2b-and-magento-rce-cve-2026-75650/
- **Phying News:** https://phying.com/item/7661