CRITICAL ALERT: Active exploitation of Adobe Commerce and Magento Open Source vulnerability
ID: fb3028e0-9c1b-5d7f-ad3d-2a00352ce1a3
STIX ID: report--fb3028e0-9c1b-5d7f-ad3d-2a00352ce1a3
Feed Name: Australian Cyber Security Centre (Alerts)
Date Published: 2026-09-09
Date Updated: 2026-09-10
Author: Australian Cyber Security Centre (ACSC)
ASD's ACSC warns of active exploitation of CVE-2026-75650 — a critical unauthenticated template-engine RCE in Adobe Commerce and Magento Open Source (requires an exposed /graphql endpoint) — and urges Australian organisations to apply the 7 September 2026 patch immediately or implement mitigations, review environments for vulnerable instances, and monitor for suspicious template processing, unexpected scheduled tasks, and other signs of compromise.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.