Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #2

Critical flaw lets attackers run code on Magento servers

Original: ⚠️ CRITICAL: Critical BlockStrap flaw lets hackers run code on Magento servers A critical RCE vulnerability (CVE-2026-10

A critical remote code execution vulnerability, tracked as CVE-2026-103849 in the BlockStrap component, affects Magento and Adobe Commerce. Unauthenticated attackers can execute arbitrary PHP code on affected servers, potentially taking full control of online stores. Security experts are urging merchants and Adobe to patch immediately.

Why now: Security researchers are alerting e-commerce operators to patch an actively discussed critical vulnerability.

MagentoAdobe CommerceBlockStrap

Open on mastodon →

Evidence

• ⚠️ CRITICAL: Critical BlockStrap flaw lets hackers run code on Magento servers A critical RCE vulnerability (CVE-2026-103849, BlockStrap) in Magento and Adobe Commerce allows unauthenticated attackers to execute arbitrary PHP code on affected servers. The flaw impacts Adobe… · threatnoir@infosec.exchange · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/2736055