Action neededAdobe Commerce · News
Adobe Commerce and Magento Open Source stores: install the July security patch
In plain English
On 27 October 2026, the US cybersecurity agency (CISA) added a Magento flaw nicknamed "PolyShell" to its list of issues known to be used in real attacks. It affects Adobe Commerce and Magento Open Source stores that haven't installed recent security updates. Adobe released the fix in its July 2026 security update.
What to do
- 1Confirm the July 2026 patch is installed
- 2Apply the later updates too
- 3Check for anything added before patching