Critical BlockStrap flaw lets hackers run code on Magento servers
2026-10-17T07:23:21Z•19f6a8b705549e09fb5c7dbaa671da314cd3e74cc8c12e5a7d94a67fe003b1be
CVE-2026-103849CVE-2026-110447Adobe CommerceArch Linux AURBeyondTrust Remote SupportBlockStrapCandiruCollabora OnlineD-LinkMagentoNextcloudUbiquitiWindows 11active-exploitationcyberattackdata breachmalvertisingmalwareproxyjackingremote-code-executionspywaresupply-chainvulnerabilityzero-clickzero-day
What happened
A BleepingComputer security news digest covering multiple significant developments, including critical actively exploited or potentially exploitable remote-code-execution vulnerabilities affecting Magento/Adobe Commerce, BeyondTrust Remote Support, and Nextcloud's Collabora Online integration; spyware delivered through zero-click malvertising; proxyjacking of networking devices; malicious Arch Linux packages; major data breaches and cyberattack disruptions; and Windows security-update issues. The most urgent items concern internet-facing RCE vulnerabilities and zero-days under exploitation.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 19f6a8b705549e09fb5c7dbaa671da314cd3e74cc8c12e5a7d94a67fe003b1be
- Enrichment time
- 2026-10-17T07:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.