ASD’s Australian Cyber Security Centre (ACSC) warns of active exploitation of CVE-2026-75650, a critical template-engine vulnerability in Adobe Commerce and Magento Open Source that enables unauthenticated remote code execution when the /graphql endpoint is exposed; organisations are urged to apply the 7 September 2026 patch immediately, or update/restrict access and monitor for suspicious activity, and to contact ACSC if impacted.