Attackers Hijacked 200+ Websites Exploiting Magento Vulnerability to Gain Root

Cybersecuritynews •Tushar Subhra Dutta • January 30, 2026

A critical security breach has exposed multiple Magento e-commerce platforms worldwide as threat actors successfully exploited a severe authentication flaw to achieve complete system control. The attack campaign, identified in January 2026, represents one of the most significant waves of coordinated web server compromises in recent months, affecting hundreds of online stores across different regions […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Magento Vulnerability Exploited in Attack on 200+ Websites In January 2026, attackers exploited a critical vulnerability in Magento, tracked as CVE-2025-54236, to hijack over 200 e-commerce websites. This severe authentication flaw allowed threat actors to gain complete control of the affected systems, marking a significant wave of coordinated web server compromises across various regions. 2 sources 50

Attackers Hijacked 200+ Websites Exploiting Magento Vulnerability to Gain Root

The full story

Extracted Entities

Attack Types (1)

Platforms (1)