[UPDATE] [kritisch] Adobe Magento Open Source: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten
Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Adobe Magento ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3223
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Exploitation confirmedCVE-2026-75650Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 81% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-75650 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- highexploited[NEU] [hoch] Adobe Magento: Mehrere Schwachstellencert-bund
- unknownexploitedAdobe Monthly Security Update (September 2026)hkcert
- unknownexploitedAdobe security advisory (AV26-888) – Update 1cccs
- highexploitedCISA Adds Four Known Exploited Vulnerabilities to Catalogcisa
- unknownexploitedNCSC-2026-0344 [1.00] [H/H] Kwetsbaarheid verholpen in Adobe Commerce en Magentoncsc-nl
- criticalexploitedCVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engi…cisa-kev
- unknownexploitedVulnérabilité dans les produits Adobe (08 septembre 2026)cert-fr-avis
- criticalexploitedCVE-2026-75650: Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Templat…nvd
Recent advisories for Adobe Magento Open Source
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- criticalexploitedCVE-2024-34102: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (…cisa-kev · 2024-07-17
- criticalexploitedCVE-2022-24086: Adobe Commerce and Magento Open Source Improper Input Validation Vulnerabilitycisa-kev · 2022-02-15
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [mittel] OpenSSH: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen2026-09-10
- high[UPDATE] [hoch] OpenVPN: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] gzip: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen2026-09-10