Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Unpatched Magento and Adobe Commerce zero-day exploited to backdoor online stores.
Run Adobe?
Get an email when a reviewed story names Adobe, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A new unpatched zero-day vulnerability, dubbed StyleSmuggler, is being actively exploited in Magento Open Source and Adobe Commerce. The flaw allows attackers to gain unauthenticated code execution and install persistent backdoors on online store servers. All current versions are reportedly affected, and attacks began shortly before the vulnerability was publicly disclosed.
The lesson from this incident
Full lessonThe StyleSmuggler zero-day vulnerability exposed a critical gap in patch management and vulnerability response for e-commerce platforms running Magento Open Source and Adobe Commerce. Because no patch was available at the time of active exploitation, attackers were able to gain unauthenticated remote code execution and install persistent backdoors before defenders could respond. This highlights the danger of zero-day exposure windows for internet-facing commerce systems that handle sensitive customer and payment data. The fact that attacks began before public disclosure suggests threat actors had prior knowledge, underscoring the need for proactive monitoring and defense-in-depth strategies rather than relying solely on patch availability.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
Indicators of Compromise
- malware — StyleSmuggler
- mitre_attack — T1070.004