Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.
https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/
BleepingComputer
npub1pk…z6763
2026-10-16 20:01:15 UTC
Author Public Key
npub1pkrnqz97z2wckgmwglckccgg65eanvw3wpvuses7npqlvv6st06svz6763Seen on
wss://relay.momostr.pinkPublished at
2026-10-16 20:01:15 UTCEvent JSON
{
"id": "f6e08521ae275c1e2e699fc944449d8d077881741d51abf2c0bffe30294c2144",
"pubkey": "0d873008be129d8b236e47f16c6108d533d9b1d17059c8661e9841f633505bf5",
"created_at": 1792180875,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@BleepingComputer/117452365876155192",
"web"
],
[
"proxy",
"https://infosec.exchange/users/BleepingComputer/statuses/117452365876155192",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/BleepingComputer/statuses/117452365876155192",
"pink.momostr"
],
[
"-"
]
],
"content": "Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.\n\nhttps://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/",
"sig": "70a91d80536782faa7f0df56f21c61f619655ffbc8e471b017aaac4113a8e9aa18adb78d2c8efc05f2e03f56714ab70f14c215aedc7b9866c18ff70e1e6c2b6f"
}