a substantial number of potentially vulnerable instances Sansec is publishing early because stores are being compromised right now, 0 on the CVSS scale, allows unauthenticated remote code execution on Adobe Commerce and Magento Open Source. Sansec, which discovered and named the bug StyleSmuggler, said exploitation began on September 4, giving attackers around three days before Adobe shipped a hotfix. The Australian Signals Directorate has sent out a critical alert about a vulnerability in the Adobe Commerce and Magento Open Source ecommerce platforms that many stores in the country run for their online businesses.