New ‘PolyShell’ flaw allows unauthenticated RCE on Magento e-stores
Thu Mar 19 2026
E-Commerce
Patch Management
Vulnerability
www.bleepingcomputer.com
A newly disclosed vulnerability dubbed 'PolyShell' affects all Magento Open Source and Adobe Commerce stable version 2 installations, allowing unauthenticated code execution and account takeover. [...]