CVE-2026-103849

CVE

Threat entity extracted from intelligence sources

Frequency

6

occurrences

First Seen

October 14, 2026

Last Seen

October 17, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical CVE-2026-103849 Vulnerability in Adobe Commerce and Magento70.5

A critical vulnerability (CVE-2026-103849) in Adobe Commerce and Magento allows unauthenticated remote code execution (RCE) through a template injection flaw, rated CVSS 10.0. Disclosed on October 13, 2026, the vulnerability affects several versions of Adobe Commerce and Magento, including 2.4.4 thr...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical CVE-2026-103849 Vulnerability in Adobe Commerce and Magento

7h ago·6 sources

Related Articles (6)

BlockStrap / CVE-2026-103849: Unauthenticated RCE via Two

APSB26-153 Magento Patch: CVSS 10.0 Flaw & How to Apply

Aimsinfosoft·8h ago

International Cyber Digest on X: "‼️ A CVSS 10 flaw lets attackers run code on Magento ...

Critical BlockStrap flaw lets hackers run code on Magento servers

Bleepingcomputer·23h ago

BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)

1 / 2

Related Entities

Zero-day Exploit TrojanOrders Adobe United States CVE-2026-75650 CVE-2026-92464 CVE-2026-92908 CVE-2026-92909 CVE-2026-92910 CVE-2026-91013 CVE-2026-100133 CVE-2026-71362