Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

Adobe has released security patches to fix a severe flaw in Adobe Commerce and Magento Open Source that is being actively exploited. The vulnerability, known as StyleSmuggler, was discovered by Sansec, which found it was being exploited as a zero-day starting September 4, 2026. The flaw is tracked as CVE-2026-75650 and has a CVSS score of 10.0, indicating a high level of severity. This update addresses the critical issue, which has been used to deploy malicious tools, including a Rust backdoor and a PHP web shell.