Adobe Commerce news and updates

Action neededAdobe Commerce · News· 27 Oct

Adobe Commerce and Magento Open Source stores: install the July security patch

In plain English

The US cybersecurity agency (CISA) has added a vulnerability nicknamed "PolyShell" to its list of known exploited flaws. It affects Adobe Commerce and Magento Open Source stores that haven't installed recent security updates. Adobe released a fix in its July 2026 security update.

For founders, developers
What to do
  1. 1Confirm the July 2026 patch is installed
  2. 2Apply the October patch and hotfix too
  3. 3Check for anything added before patching
Don’t miss

Latest

Newest first · Last update 12 hours ago
Action neededAdobe Commerce

How to check your Adobe Commerce or Magento store for hidden scripts

Security researchers at Sansec report finding unwanted scripts on 953 online stores, most running Magento Open Source or Adobe Commerce, many of which had missed recent security updates. The scripts were hidden inside the stores' content blocks, which makes them harder for standard scans to spot.

26 Oct · For founders, developers
Action neededAdobe Commerce

Magento and Adobe Commerce stores need October's security patch

Adobe released a critical security update for Adobe Commerce and Magento Open Source on 13 October 2026. Stores also need a separate hotfix released in September for another serious flaw. Adobe recommends changing your store's encryption keys and passwords as part of the fix.

13 Oct · For founders, developers