CISA flags actively exploited Adobe Commerce 'PolyShell' flaw as Sansec reports hundreds of breached stores
CISA added the critical Adobe Commerce and Magento file-upload flaw CVE-2026-48356 to its KEV catalog after Sansec reported attackers used it to breach hundreds of online stores.