Will Magento/Adobe Commerce StyleSmuggler zero-day be added to CISA KEV by end of September 2026?

A zero-day vulnerability dubbed 'StyleSmuggler' affecting all versions of Magento and Adobe Commerce is being actively exploited to deploy Linux backdoors (Bleeping Computer). The flaw allows remote code execution and poses immediate risk to e-commerce supply chains globally.

Resolution Criteria

Confirmed addition of a CVE related to StyleSmuggler (or Magento/Adobe Commerce RCE attributed to this campaign) to the CISA Known Exploited Vulnerabilities catalog, or official Adobe security advisory confirming exploitation in the wild.