#Sansec

Critical BlockStrap flaw in Magento lets attackers run code on store servers

A maximum-severity template engine flaw, CVE-2026-103849, in Adobe Commerce and Magento Open Source can allow arbitrary PHP execution, Sansec warns.

1h ago