THREATOPS

THREAT OPS › Threat News › [CISA KEV] CVE-2026-75650 — Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

[CISA KEV] CVE-2026-75650 — Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

highcisa_kevPublished 2026-09-08

CVE: CVE-2026-75650 Vendor: Adobe Product: Commerce and Magento Vulnerability: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Date Added: 2026-09-08 Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidanc

MITRE ATT&CK techniques

Cloud ServicesT1021.007

Indicators of compromise

CVE-2026-75650cve
https://helpx.adobe.com/security/products/magento/apsb26-146.htmlurl

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-75650