Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler by Sansec, which discovered zero-day exploitation starting September 4, 2026. "This update resolves a critical

The article reports that Adobe patched a maximum-severity (CVSS 10.0) zero‑day vulnerability, CVE-2026-75650 (StyleSmuggler), in Adobe Commerce and Magento Open Source after it was actively exploited to deploy a Rust backdoor and PHP web shell. This is a traditional software supply chain and web application security issue, with no explicit mention of AI models or agents. From a RealGround perspective, such critical flaws in widely used commerce platforms highlight how third‑party components and dependencies in AI‑enabled ecommerce or SaaS systems can be compromised, indirectly affecting AI workloads that rely on them. Organizations should apply vendor patches quickly, maintain software bills of materials (SBOMs), and treat core commerce platforms as part of their AI supply chain risk surface, integrating them into ongoing AI supply chain risk assessments.