Skip to content

CVE-2026-100133

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
October 17, 2026
Last Seen
October 17, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A critical vulnerability (CVE-2026-103849) in Adobe Commerce and Magento allows unauthenticated remote code execution (RCE) through a template injection flaw, rated CVSS 10.0. Disclosed on October 13, 2026, the vulnerability affects several versions of Adobe Commerce and Magento, including 2.4.4 thr...

Public Exploits

Checking GitHub for proof-of-concept code…