search
Magento
Trends
- 1Two critical PHP flaws allow unauthenticated remote code execution●So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is
PHP was hit with two critical vulnerabilities that allow attackers to run arbitrary code on servers without any authentication, affecting popular platforms including WordPress, MediaWiki, Magento, Joomla and Laravel. Making matters worse, technical details of the flaws leaked before an official patch was available, leaving administrators exposed and prompting urgent calls to apply mitigations immediately.
- 2Two critical PHP bugs allow unauthenticated remote code execution●So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is
Two critical vulnerabilities disclosed in PHP allow attackers to run arbitrary code on servers without authentication. Details leaked before a patch was available, heightening the risk of exploitation. The flaws affect widely used platforms including WordPress, MediaWiki, Magento, Joomla and Laravel, meaning millions of sites could be exposed. Developers are urging administrators to patch as soon as fixes are released.
- 3Two Critical PHP Vulnerabilities Actively Exploited Worldwide▼⚠️ CRITICAL: Widespread PHP Flaw May Cause Many Site Outages Today Two critical PHP RCE vulnerabilities (CVE-2026-109618
Security researchers are warning about two critical remote code execution vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, affecting PHP 5.4 and later. Reports say both flaws are being actively exploited in the wild, with an estimated 70% of websites running WordPress, Drupal, Magento and Joomla potentially exposed. Administrators are urged to patch immediately to avoid outages or server compromise.
- 4Critical flaw lets attackers run code on Magento servers▼⚠️ CRITICAL: Critical BlockStrap flaw lets hackers run code on Magento servers A critical RCE vulnerability (CVE-2026-10
A critical remote code execution vulnerability, tracked as CVE-2026-103849 in the BlockStrap component, affects Magento and Adobe Commerce. Unauthenticated attackers can execute arbitrary PHP code on affected servers, potentially taking full control of online stores. Security experts are urging merchants and Adobe to patch immediately.
- 5Critical code execution flaw prompts urgent patch for Adobe Commerce and Magento▼WARNING: Template Injection Vulnerability in Adobe Commerce and Magento Open Source Can Be Exploited to Execute Arbitrary Code, Patch Immediately! | CCB Belgium
Belgium's cyber security centre, CCB, has issued a warning about a template injection vulnerability in Adobe Commerce and Magento Open Source that can be exploited to execute arbitrary code. The agency urges all merchants and administrators to apply the available patch immediately to prevent potential attacks on online stores running the affected platforms.