Actively Exploited RCE Vulnerability Affects Adobe Commerce and Magento
Active Exploitation · 4 sources · Updated 2mo ago · First seen Sep 9, 2026
Adobe issued security updates for multiple vulnerabilities in Adobe Commerce, Adobe Commerce B2B, and Magento Open Source, including CVE-2026-71362, which open-source reporting indicates is being actively exploited in the wild. The broader advisory also covers Adobe Campaign Classic, ColdFusion, Content Credentials tools and SDKs, and Lightroom Classic.
The Commerce flaws are remotely exploitable and may enable arbitrary code execution, malicious script injection into web forms, disclosure of sensitive information, security-control bypasses, privileged access to restricted files, and temporary denial of service. NCSC Netherlands, Guyana CIRT, and bjCSIRT urged administrators to apply Adobe's updates immediately; NCSC reported no known public proof-of-concept or exploit code for the vulnerabilities it described.
