SecurityBleepingComputerabout 1 hour ago
BlockStrap Flaw Lets Hackers Run Code
2 min read
Researchers warn that a critical BlockStrap vulnerability, CVE-2026-103849, allows hackers to execute arbitrary PHP code on Magento and Adobe Commerce servers. Sansec states the flaw impacts September versions through 2.4.9 and 1.5.3, noting Adobe's priority 2 rating underestimates the danger. The firm expects mass exploitation soon, advising admins to apply the 2026-oct release or isolated patch alongside the VULN-39341 hotfix.
Level
Hype check
Tap to vote and see what everyone thinks.
