Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

A newly discovered vulnerability in Magento Open Source and Adobe Commerce is being exploited by attackers, allowing them to run malicious code on an online store's server without authentication. The flaw, named StyleSmuggler, was discovered by Dutch e-commerce security company Sansec. Sansec published an advisory on the issue, stating that attacks began on September 4. The vulnerability remains unpatched, enabling attackers to backdoor online stores. Sansec released information on the vulnerability early.