/
initial_access_vector:exploit_public_facing × victim_sectors:e-commerce × criticity:high × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · high

Critical BlockStrap flaw (CVE-2026-103849) in Magento and Adobe Commerce enables PHP code execution; exploitation expected

Sansec warns that a maximum-severity flaw, CVE-2026-103849 (dubbed BlockStrap), in Magento Open Source and Adobe Commerce could allow attackers to execute arbitrary PHP code on store servers. No in-the-wild exploitation has been observed yet, but Sansec identified four potential attack paths in under 24 hours and expects mass exploitation…

CVE-2026-103849 e-commerce retail
thehackernews.com · high

Chinese-speaking actor uses autonomous Cairn AI agents to attack 1,200+ websites and breach 100+ companies, incl. Deere and SharkNinja

A Chinese-speaking operator used the open-source AI agent framework Cairn to run autonomous attacks against more than 1,200 sites, reaching websites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the operation around 2 October 2026 by scanning for about two dozen exposed Cairn…

CVE-2026-75650 AIA0001 retail manufacturing