CVE record · 7 sources
CVE-2026-75650
KEVCVSS 10.0Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could…
- Vendor
- Adobe
- Product
- adobe
- CVSS
- 10.0
- EPSS
- 0.039 (p90)
- CISA KEV
- listed
- Exposure class
- Web platform, Edge / VPN / firewall, Browser, Operating system
Coverage
9Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could…
Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.
-
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
IntroductionOn September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The vulnerability carries a…
-
September 2026 Patch Tuesday
What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix…
-
The September 2026 Security Update Review
Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an…
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used…
-
October 2026 Patch Tuesday
What's happened since September Patch Tuesday Here’s a fun fact to start this month. Ivanti’s Vulnerability Knowledge Base is now tracking more than 406,000 CVEs. Over 78,000 of them were disclosed in 2026 alone, which is more…
-
September 2026 CVE Landscape
In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.
-
Fake Kernel Threads Are Hiding Backdoors on Linux Servers and Appliances
Attackers keep disguising malware as Linux kernel worker processes, but careful checks will expose the disguise On September 5, 2026, Sansec, a security firm that investigates attacks on online stores, reported that attackers…
-
The October 2026 Security Update Review
Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland , because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I…