Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
2026-09-06T07:23:59Z•1cfcd9e5d2a084225008f25795856205ffea5c855493159711194b41db643678
CVE-2026-14894CVE-2026-20212CVE-2026-59346CVE-2026-6471CVE-2026-81578CVE-2026-82078CVE-2026-83548CVE-2026-85046Adobe CommerceCI/CD securityCISA KEVChromeCisco NexusMagentoPaperCutPostgreSQLVMwareWindowsWordPressactive exploitationcloud securitycredential theftdata breachinfostealermalwarephishingprivilege escalationremote code executionspywaresupply-chain compromisevulnerabilityweb application securityzero-day
What happened
A September 2026 cybersecurity news feed covering actively exploited vulnerabilities, zero-days, malware campaigns, phishing, supply-chain compromises, data breaches, and security advisories. Notable items include critical flaws in VMware Workstation/Fusion, Cisco Nexus 9000, PaperCut, WordPress plugins, Chrome V8, PostgreSQL, and Magento/Adobe Commerce; credential theft and ransomware-enabling campaigns; Pegasus spyware targeting; and major third-party data exposures.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 1cfcd9e5d2a084225008f25795856205ffea5c855493159711194b41db643678
- Enrichment time
- 2026-09-06T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.