Adobe Commerce news and updates

Action neededAdobe Commerce · News· 27 Oct

Adobe Commerce and Magento Open Source stores: install the July security patch

In plain English

On 27 October 2026, the US cybersecurity agency (CISA) added a Magento flaw nicknamed "PolyShell" to its list of issues known to be used in real attacks. It affects Adobe Commerce and Magento Open Source stores that haven't installed recent security updates. Adobe released the fix in its July 2026 security update.

For founders, developers

Why it matters

What to do

1Confirm the July 2026 patch is installed
2Apply the later updates too
3Check for anything added before patching

Don’t miss

Latest

Newest first · Last update yesterday

Action neededAdobe Commerce

Adobe Commerce Cloud stores on old versions face being taken offline

Adobe has set deadlines for Adobe Commerce on Cloud stores running old software. PHP 8.1 or older, Redis 5 or older and some other outdated services must be upgraded by 31 May 2027. Stores on Commerce 2.4.4 or 2.4.5 must upgrade or move to Adobe's SaaS version by 1 June 2027. Miss them and Adobe may switch your storefront off.

14 Oct · For founders, developers198 days left

Action neededAdobe Commerce

Magento and Adobe Commerce stores need October's security patch

Adobe released a security update for Adobe Commerce and Magento Open Source on 13 October 2026, covering versions 2.4.4 to 2.4.9. A separate hotfix for another issue isn't included in the October patch and has to be applied on its own.

13 Oct · For founders, developers