Active Exploitation of Critical Adobe Commerce Account-Hijack Flaw

Thu, 13 Aug 2026 11:57:16 +0000

Engineer — Act: Active exploitation attempts against CVE-2026-71362 in Adobe Commerce and Magento have been observed despite low EPSS — if you run either platform, patch immediately and audit recent customer authentication logs for signs of account takeover.
SOC/IR — Plan: No IOCs or ATT&CK-mapped TTPs are available yet, but active exploitation is reported; build or tune detections for anomalous authentication patterns and privilege changes on Commerce/Magento instances in your estate.
Leader — Plan: If your organization or a key e-commerce vendor runs Adobe Commerce or Magento, confirm patching status this week and assess whether customer account data may have been exposed, given the reported exploitation activity.
Signals: CVE-2026-71362 — CISA KEV: not listed, EPSS 0.00, no public PoC found

Adobe-Commerce on CuraSec