Live · 98 sources · updated just now
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 7 sources

CVE-2026-75650

KEVCVSS 10.0

Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could…

Vendor
Adobe
Product
adobe
CVSS
10.0
EPSS
0.039 (p90)
CISA KEV
listed
Exposure class
Web platform, Edge / VPN / firewall, Browser, Operating system

Coverage

9

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. KEV NVD

    Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could…

    Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.

    KEV CVSS 10.0 Fix available CVE-2026-75650 Adobe
  2. Research ThreatLabz

    CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability

    IntroductionOn September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The vulnerability carries a…

  3. Ivanti advisory Ivanti

    September 2026 Patch Tuesday

    What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix…

    Exploited CVSS 7.0 Fix available CVE-2026-68820CVE-2026-33824CVE-2026-55040+7 more Ivanti Microsoft
  4. Research ZDI

    The September 2026 Security Update Review

    Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an…

    Exploited CVSS 10.0 Fix available CVE-2026-75650CVE-2026-81963CVE-2026-85880+57 more Microsoft Adobe
  5. CISA advisory CISA

    CISA Adds Four Known Exploited Vulnerabilities to Catalog

    CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used…

  6. Ivanti advisory Ivanti

    October 2026 Patch Tuesday

    What's happened since September Patch Tuesday Here’s a fun fact to start this month. Ivanti’s Vulnerability Knowledge Base is now tracking more than 406,000 CVEs. Over 78,000 of them were disclosed in 2026 alone, which is more…

    Exploited CVSS 8.7 No fix yet CVE-2026-88779CVE-2026-104286CVE-2026-102255+11 more Ivanti
  7. Research Insikt Group

    September 2026 CVE Landscape

    In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

  8. Research Eclypsium

    Fake Kernel Threads Are Hiding Backdoors on Linux Servers and Appliances

    Attackers keep disguising malware as Linux kernel worker processes, but careful checks will expose the disguise On September 5, 2026, Sansec, a security firm that investigates attacks on online stores, reported that attackers…

  9. Research ZDI

    The October 2026 Security Update Review

    Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland , because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I…

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help