CISA Known Exploited Vulnerability
CVE-2026-75650: Magento/Adobe Commerce remote code execution (actively exploited)
Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.
CISA catalog entry
Product
Commerce and Magento
Vendor
Adobe
Added to KEV
2026-09-08
Remediation due
2026-09-11
Related vulnerabilities