[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fb5yY8aU9fxeRuSK4tsBfN63VLX2SyXxrsPPZSDbXMmM":3},{"article":4,"iocs":48,"watch_terms":53,"solutions":54,"lesson":111},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"57d4e0ba-7b42-4dab-ac72-c02d6628edc0","Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell","adobe-patches-magento-zero-day-exploited-to-deploy-rust-backdoor-and-php-web-she-2fdb7e","Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler by Sansec, which discovered zero-day exploitation starting September 4, 2026. \"This update resolves a critical","Adobe has released patches for a critical zero-day vulnerability in Adobe Commerce and Magento Open Source, tracked as CVE-2026-75650. The flaw, codenamed StyleSmuggler, allows for arbitrary code execution and has been actively exploited to deploy a Rust-based Linux backdoor and a PHP web shell.","Adobe patches Magento zero-day exploited for Rust backdoor and PHP web shell.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fadobe-patches-magento-zero-day.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEg_xdakttovno7kFgFYIw5XGFGcSZibVvXYB64vih4iZpc4_WY_t7oe1X3igSPGXBa8UTkf4z4xn_GzZ_n7PmuFFvYC8Wsmb04PxYP5z-XHjZZFe_SASihwZNg1dxHXQzz8hBRo-6LhvQmwyo_MA9Kj6hrcci6ouvOX1D4f-0dNvs57M6WneQHC61yZkF_o\u002Fs1600\u002Fmagento.jpg","2026-09-08T09:13:47+00:00","2026-09-08T10:00:16.033077+00:00",9,[17,20,22,25,28],{"name":18,"type":19},"Adobe Commerce","product",{"name":21,"type":19},"Magento Open Source",{"name":23,"type":24},"Adobe","vendor",{"name":26,"type":27},"PHP","technology",{"name":29,"type":27},"Rust","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,38,43],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[49],{"type":50,"value":51,"context":52},"cve","CVE-2026-75650","Zero-day vulnerability in Adobe Commerce and Magento Open Source",[23,18,21],{"controls":55,"vendors":110},[56,85],{"slug":57,"name":58,"problem":59,"products":60},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[61,69,77],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":86,"name":87,"problem":88,"products":89},"patch-management","Automated patch management","Known holes get closed in days, not months.",[90,94,102],{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":86,"product_name":91,"url":92,"description":93},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",[],{"slug":112,"title":113,"body":114,"framework_refs":115,"framework_notes":130},"adobe-magento-zero-day-exploited-to-deploy-rust-backdoor-and-php-web-shell","Adobe Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell","A critical zero-day vulnerability (CVE-2026-75650) in Adobe Commerce and Magento Open Source, dubbed StyleSmuggler, enabled attackers to execute arbitrary code and deploy persistent malware including a Rust-based Linux backdoor and a PHP web shell — before a patch was even available. Zero-day exploits are particularly dangerous because defenders have no advance warning, making rapid detection and response the only viable defense. The deployment of both a backdoor and a web shell indicates attackers sought persistent, multi-layered access to compromised environments. E-commerce platforms like Magento are high-value targets due to the sensitive payment and customer data they process. This incident underscores the need for layered defenses that don't rely solely on patching as the primary security control.",[116,117,118,119,120,121,122,123,124,125,126,127,128,129],"CIS Control 7: Continuous Vulnerability Management","CIS Control 10: Malware Defenses","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev 4: Guide to Enterprise Patch Management","NIST SI-3: Malicious Code Protection","NIST SI-7: Software, Firmware, and Information Integrity","NIST IR-4: Incident Handling","NIST RA-5: Vulnerability Monitoring and Scanning","OWASP Top 10: A06 Vulnerable and Outdated Components","PCI DSS Requirement 6.3: Security Vulnerabilities are Identified and Addressed","PCI DSS Requirement 10: Log and Monitor All Access to System Components","GDPR Article 32: Security of Processing (technical measures to ensure data integrity)","ITIL: Problem Management — root cause analysis and known error management",{}]