Security

Critical PHP2Shell vulnerabilities have been publicly disclosed, and early attack activity has been reported. Magento and Adobe Commerce merchants should urgently confirm that their hosting environments have received the applicable PHP security patches. Application-level updates and WAF protections alone are insufficient.

Adobe has released a new security update, APSB26-153, addressing multiple vulnerabilities affecting Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. The update includes several critical vulnerabilities that could potentially allow attackers to execute malicious code, gain elevated privileges, modify server files, or bypass security protections. At Zynovo, we strongly encourage all merchants running affected versions to review this advisory and prioritize

For years, many Adobe Commerce and Magento Open Source merchants have measured their security posture by a simple question: Is our Magento installation up to date? In 2026, that question is no longer sufficient. An ecommerce website can be running a supported Magento version with the latest security patches and still face significant risks from vulnerable third-party extensions, compromised credentials, custom code,

On September 5, 2026, Sansec publicly disclosed StyleSmuggler, CVE-2026-75650, after observing active attacks against Magento and Adobe Commerce beginning September 4. Adobe released emergency bulletin APSB26-146 on September 7, identifying the vulnerability as critical and capable of enabling arbitrary code execution; Adobe confirmed exploitation in the wild. (Sansec) Then, on September 8, Adobe published another scheduled Commerce security update, APSB26-138, and

Adobe released APSB26-73 on July 14, addressing critical, important and moderate vulnerabilities with potential impacts including arbitrary code execution, privilege escalation and security-feature bypass. (Adobe Help Center) July is also when many ecommerce teams are deep into Q4 development. Security and roadmap pressure now collide. Manual Regression Testing Does Not Scale with Patch Frequency If testing every security release requires multiple employees clicking through

Adobe released APSB26-05 on March 10, 2026. The update addressed critical, important and moderate vulnerabilities with potential consequences including security bypass, denial of service, privilege escalation, arbitrary code execution and arbitrary filesystem reads. (Adobe Help Center) If this creates a completely new operational process inside your organization, that is the problem to fix next. Security Releases Are Normal Platform Operations Commerce systems will

Adobe published security bulletin APSB25-88 on September 9, 2025, addressing CVE-2025-54236, a critical Adobe Commerce and Magento Open Source vulnerability. For merchants, events like this reinforce an important principle: Commerce security requires an operational process—not occasional patching. Determine Your Exposure Document: Commerce/Magento version Security patch level B2B version Extensions Custom modules Infrastructure Then compare the environment with Adobe's official affected-version guidance. Follow Official Remediation Guidance Security information changes quickly. Use Adobe's bulletin and official

Critical Vulnerabilities Patched On April 08, 2025, Adobe released a critical security patch (APSB25-26) for Adobe Commerce and Magento Open Source. This update addresses important and moderate flaws that could lead to security feature bypass, privilege escalation, and application denial-of-service. What's Included in APSB25-26? This patch contains fixes for 4 Important, and 1 Moderate issues. Affected Versions: Magento Open Source: 2.4.8-beta2 2.4.7-p4 and earlier 2.4.6-p9 and earlier 2.4.5-p11

Critical Vulnerabilities Patched Adobe has released a critical security patch, APSB25-08, to address vulnerabilities affecting Adobe Commerce and Magento Open Source. This patch covers critical, important, and moderate flaws that could lead to serious consequences, including arbitrary code execution, security feature bypass, and privilege escalation. What's Included in APSB25-08? This patch contains fixes for 14 Critical, 14 Important, and 3 Moderate issues. Affected Versions: Magento

Critical Vulnerabilities Patched Adobe has released a critical security patch, APSB24-73, to address a critical vulnerability affecting Adobe Commerce and Magento Open Source platforms. The potential consequences of these vulnerabilities are severe, including arbitrary code execution, unauthorized file access, security feature bypass, and privilege escalation. What's Included in APSB24-73? This patch contains fixes for 6 Critical, 6 Important, and 10 Moderate issues. Affected Versions: Magento