Critical BlockStrap flaw lets hackers run code on Magento servers

T1Covered by 1 source · first reported by BleepingComputer at 16 Oct, 20:00 UTC

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]

sciencesecurity

Sources

• T1Critical BlockStrap flaw lets hackers run code on Magento serversBleepingComputer16 Oct, 20:00

Vulnerabilities

• CVE-2026-103849