Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce to run malicious code on online-store servers without authentication and install a persistent backdoor. Sansec said exploitation began on September 4; as of September 6, Adobe had published no fix, CVE identifier, or official mitigation.