Magento and Adobe Commerce Face Active Zero-Day Exploitation

A critical zero-day remote code execution vulnerability, dubbed 'StyleSmuggler,' is being actively exploited in all current versions of Magento Open Source and Adobe Commerce. Unauthenticated attackers can gain full control of online stores, with attacks reported since September 5, 2026. Adobe has not yet issued a patch, posing a significant risk to e-commerce platforms.