Critical BlockStrap flaw lets hackers run code on Magento servers

Critical BlockStrap flaw lets hackers run code on Magento servers

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]

BlockStrap / CVE-2026-103849: Unauthenticated RCE via Two-Stage Directive Processing in Magento and Adobe Commerce

1. Basic Information Article Name: BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849) Published By: Sansec Publication Date: 2026-10-15 Updated Date: None Original Source: Sansec Related Sources: Adobe Security Bulletin APSB26-153, BleepingComputer: Critical BlockStrap flaw lets hackers run code on Magento servers, Adobe Official KB: APSB26-153 Isolated Patch Application Conditions Related Malware: None Related Threat Groups: No…

Critical BlockStrap flaw lets hackers run code on Magento servers | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. According to e-commerce security firm Sansec, attacks leveraging the vulnerability, dubbed BlockStrap, have not yet been observed, but threat actors are expected to find a way to exploit […] Thank you for subscribing to our RSS feed!