> New ‘PolyShell’ flaw allows unauthenticated RCE on Magento e-stores
[AUTHOR: Bill Toulas]
[DATE: 19/03/2026 20:01]
[LANGUAGE: EN]
A newly disclosed vulnerability dubbed 'PolyShell' affects all Magento Open Source and Adobe Commerce stable version 2 installations, allowing unauthenticated code execution and account takeover. [...]