Adobe Commerce news and updates

Action neededAdobe Commerce · News· 27 Oct

Adobe Commerce and Magento Open Source stores: install the July security patch

In plain English

The US cybersecurity agency (CISA) has added a vulnerability nicknamed "PolyShell" to its list of known exploited flaws. It affects Adobe Commerce and Magento Open Source stores that haven't installed recent security updates. Adobe released a fix in its July 2026 security update.

For founders, developers
What to do
  1. 1Confirm the July 2026 patch is installed
  2. 2Apply the October patch and hotfix too
  3. 3Check for anything added before patching
Don’t miss

Latest

Newest first · Last update 11 hours ago
Action neededAdobe Commerce

How to check your Adobe Commerce or Magento store for hidden scripts

Security researchers at Sansec report finding unwanted scripts on 953 online stores, most running Magento Open Source or Adobe Commerce, many of which had missed recent security updates. The scripts were hidden inside the stores' content blocks, which makes them harder for standard scans to spot.

26 Oct · For founders, developers