GoKawiilAdobe patches critical Magento zero-day CVE-2026-75650 used to plant backdoors
Adobe issued an emergency hotfix for a maximum-severity flaw in Magento and Adobe Commerce that attackers have exploited since at least September 4 to install a hidden backdoor. Security firm Sansec found the malware disguised its command server as an NTP time server, though compromised sites still leaked telltale fake 'Payment Transaction Failed' emails. Adobe's fix, labeled VULN-39341, covers Adobe Commerce, Commerce B2B, and Magento Open Source across multiple version branches.
GoKawiil's interpretation of the reporting above, not reported fact.
E-commerce platforms are high-value targets because breaches can expose customer payment data at scale, and Magento has a long history of mass exploitation campaigns like Magecart. The active exploitation before a patch existed means many stores were likely compromised during the exposure window, making the post-patch credential rotation Adobe recommends just as critical as the update itself.
- CVE-2026-75650, dubbed StyleSmuggler, is a critical Magento/Adobe Commerce zero-day exploited since September 4
- Attackers used it to install a stealthy backdoor disguised as NTP traffic, detectable via fake payment failure emails
- Admins must apply hotfix VULN-39341 and rotate all credentials, tokens, and API keys after patching
Yubico YubiKey 5 NFC Security Key — When e-commerce admin panels are under active attack, hardware-backed two-factor login is one of the strongest safeguards you can add. The YubiKey 5 NFC plugs into USB-A or taps to a phone via NFC and works with the FIDO2/WebAuthn logins many store platforms and hosting dashboards support. It's a simple, physical layer of defense for the accounts that keep your Magento or Adobe Commerce store running.
See Yubico YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-08
Published there as: “Adobe fixes critical Magento zero-day exploited to backdoor servers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.