Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

Adobe has patched a critical zero-day vulnerability, CVE-2026-75650 (CVSS score 10.0), actively exploited in the wild and dubbed StyleSmuggler by Sansec. The flaw affects Adobe Commerce and Magento Open Source, enabling unauthenticated remote code execution via PHP code injection in the template system. Threat actors are exploiting the vulnerability to deploy a Rust-based Linux backdoor and a PHP web shell for persistent access and arbitrary code execution on compromised e-commerce servers.

AI-extracted · verify before operational use