Skip to content
COOEY

FAIL › dossier

Commerce and Magento

PRODUCT

· dossier confidence 0%

Commerce and Magento is an e-commerce platform provider with a documented history of critical security failures. Its products have suffered multiple high-severity remote code execution vulnerabilities that were left unpatched, allowing attackers to take control of customer-facing sites.

Failure events
3
Zero-days
0
RCEs
2
On KEV
3
Critical
0
Worst shame
85
PROFILE
CategoryE-commerce PlatformWhat they doCommerce and Magento provides e-commerce software solutions for online retail platforms.
SECURITY POSTURE

The company has a poor security posture, evidenced by multiple high-severity remote code execution (RCE) vulnerabilities in its core products that remained unpatched and were exploited in the wild.

Notable failures
  • CVE-2026-75650: Unpatched template engine RCE in Adobe Commerce/Magento
  • CVE-2025-54236: Unpatched input validation RCE in Magento REST API
Patterns: Repeated unpatched RCE vulnerabilities in core components; Delayed patching of critical flaws leading to exploitation in the wild
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2026-09-08 CVE-2026-75650 high An unpatched template engine flaw in Adobe Commerce and Magento allows remote code execution, enabling attackers to take control of e-commerce sites.
2026-09-24 CVE-2026-71362 high An incorrect authorization flaw in Adobe Commerce and Magento allowed attackers to gain elevated access to sensitive resources without user interaction.
2025-10-24 CVE-2025-54236 high Adobe's Magento suffered an unpatched input validation flaw exploited in the wild, allowing remote code execution and potential account takeover via the REST API.
DOSSIER SOURCES
Open questions: Exact founding date and headquarters location · Current ownership structure and company size
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-12 03:55:29.191604+00:00