Source: bleepingcomputer.com
A critical maximum-severity vulnerability tracked as CVE-2026-103849 has been discovered in BlockStrap, affecting Magento and Adobe Commerce platforms. The flaw could allow attackers to execute arbitrary PHP code on store servers. Researchers are warning that exploitation could be imminent. The vulnerability poses a significant risk to e-commerce stores running Magento and Adobe Commerce. No additional details about patches or mitigations are provided in the article excerpt, but the severity rating suggests urgent remediation is required. The issue highlights ongoing risks to widely-used e-commerce infrastructure.
