StyleSmuggler: Unpatched Magento and Adobe Commerce Zero-Day Exploited

StyleSmuggler is an actively exploited, unpatched unauthenticated remote code execution zero-day affecting Magento Open Source and Adobe Commerce that allows attackers to plant PHP code via writable Magento files, trigger execution through the payment reminder email flow, and deploy a persistent Rust-based backdoor; Sansec and hosting responders observed real-world compromises, no CVE or vendor patch had been issued at the time of reporting, and recommended mitigations include disabling GraphQL, server-level hardening (disable proc_open, mount tmp with noexec), IoC hunts in var/report and cron spools, and credential rotation.