132,707 Magento Matches and 5,314 Title Matches: Measuring a Commerce Platform Under Active Exploitation Commerce platforms are unusual in an exposure assessment because their public storefront is the product. Unlike an internal management console, a storefront has to be reachable by customers. That makes the exposure question less about whether an instance is public and more about which parts of it are. The context CVE-2026-75650, named StyleSmuggler, is a template engine injection in Adobe Commerce and Magento Open Source affecting versions 2. Exploitation was confirmed from 4 September 2026, and Adobe released hotfix VULN-39341 on 7 September.