Unpatched Zero-Day Vulnerability Actively Exploited in Magento and Adobe Commerce

A new, unpatched zero-day vulnerability, dubbed 'StyleSmuggler' by security researchers, is being actively exploited in Magento Open Source and Adobe Commerce. This flaw allows attackers to execute malicious code on an online store's server without authentication and install persistent backdoors. All current versions of the platforms are reportedly affected, with attacks observed since September 4, 2026.