StyleSmuggler: The Magento Zero-Day That Ran for Three Days Unpatched
Sansec disclosed StyleSmuggler on September 5: unauthenticated remote code execution on fully patched Magento and Adobe Commerce stores, used to plant backdoors before Adobe fixed it on September 7 as CVE-2026-75650.