Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5966 articles · 249423 vulns · 37/41 feeds (7d)
← Back to list
10.0
CVE-2026-75650KEVEXPLOITEDPATCHED
adobe · commerce

Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

Description

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Affected Products

VendorProductVersions
adobecommerce0, 0, 0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
adobecommerce_b2bcve_cpe95%
adobemagentocert_advisory90%

References

  • https://helpx.adobe.com/security/products/magento/apsb26-146.html(vendor-advisory)

Related News (14 articles)

Tier D
The Hacker News3d ago
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
→ No new info (linked only)
Tier B
BSI Advisories9d ago
[NEU] [hoch] Adobe Magento Open Source: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR9d ago
Multiples vulnérabilités dans les produits Adobe (14 octobre 2026)
→ No new info (linked only)
Tier B
CERT-FR39d ago
Bulletin d'actualité CERTFR-2026-ACT-039 (14 septembre 2026)
→ No new info (linked only)
Tier D
Heise Security44d ago
September-Patchday: Adobe schließt kritische Zero-Day-Lücke und 172 weitere
→ No new info (linked only)
Tier B
BSI Advisories44d ago
[NEU] [hoch] Adobe Magento: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
CSO Online44d ago
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
→ No new info (linked only)
Tier D
SecurityWeek45d ago
Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day
→ No new info (linked only)
Tier B
CCCS Canada45d ago
Adobe security advisory (AV26-888)
→ No new info (linked only)
Tier B
BSI Advisories45d ago
[NEU] [kritisch] Adobe Magento Open Source: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten
→ No new info (linked only)
Tier D
CSO Online45d ago
Adobe Commerce max-severity bug comes under active attack
→ No new info (linked only)
Tier D
The Hacker News45d ago
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
→ No new info (linked only)
Tier B
CERT-FR45d ago
Vulnérabilité dans les produits Adobe (08 septembre 2026)
→ No new info (linked only)
Tier C
VulDB45d ago
CVE-2026-75650 | Adobe Commerce/Commerce B2B/Magento Open Source Template Engine neutralization
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA KEV✅ Yes
Actively exploited✅ Yes
Patch available
Hotfix for CVE-2026-7565
CWECWE-1336
PublishedSep 7, 2026
Trending Score104🔥
Source articles14
Independent8
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-103849
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Trending: 34
CRITICALCVE-2026-106621
ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
Trending: 21
CRITICALCVE-2026-106622
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
Trending: 21
CRITICALCVE-2026-105899
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Trending: 21
CRITICALCVE-2026-106624
ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
Trending: 21

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Sep 7, 2026
Added to CISA KEV
Sep 7, 2026
Discovered by ZDM
Sep 7, 2026
Actively Exploited
Sep 9, 2026
Patch Available
Sep 9, 2026