CVE-2026-75650

An unpatched template engine flaw in Adobe Commerce and Magento allows remote code execution, enabling attackers to take control of e-commerce sites.

This vulnerability allows attackers to execute arbitrary code on vulnerable Adobe Commerce and Magento installations, leading to full system compromise and potential data theft. DIB organizations must ensure all e-commerce platforms are patched immediately, as this flaw is actively exploited in the wild and represents a severe compliance risk under CMMC/NIST 800-171.

Shame score — The flaw is actively exploited in the wild, allowing remote code execution on widely deployed e-commerce platforms, demonstrating severe negligence in patch management and leaving organizations exposed to data breaches and ransomware.