Adobe Commerce and Geo Server Vulnerabilities Under Active Exploitation

Attackers are actively exploiting a critical Adobe Commerce authorization flaw (CVE-2026-71362) immediately after its disclosure, allowing session switching abuse. Additionally, an unauthenticated SQL injection in Geo Server, escalating to remote code execution, is also being exploited within hours of its disclosure. Defenders are urged to apply patches and monitor for anomalous activity.