WARNING: Template Injection Vulnerability in Adobe Commerce and Magento Open Source Can Be Exploited to Execute Arbitrary Code, Patch Immediately!
ID: 5f8053f0-10b2-5511-9934-182b056ecf15
STIX ID: report--5f8053f0-10b2-5511-9934-182b056ecf15
Threat Score
**Executive summary:** CVE-2026-103849 is a critical (CVSS 10) template-engine injection vulnerability affecting multiple versions of Adobe Commerce, Adobe Commerce B2B and Magento Open Source that allows unauthenticated remote arbitrary code execution; organizations are strongly advised to apply vendor updates immediately and enhance monitoring for related suspicious activity.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.