Adobe has issued an urgent security bulletin (APSB26-146) addressing a critical vulnerability identified as CVE-2026-75650 in Adobe Commerce and Magento Open Source platforms.
The company confirmed that attackers are actively exploiting this security flaw in the wild, posing severe risks to unpatched e-commerce storefronts. Successful exploitation could allow unauthorized actors to execute arbitrary code, bypass security controls, and compromise sensitive customer data or system infrastructure.
Affected Platforms:
Adobe Commerce & Magento Open Source (various supported versions)
Action Required:
Store administrators and developers must prioritize applying the APSB26-146 security hotfix immediately. If immediate patching is not feasible, merchants are strongly advised to implement Adobe's recommended mitigation steps to protect their platforms against potential exploitation.
Stay protected — review Adobe’s security bulletin now to apply the patch.
Source: Magento News / Docs