{"uuid": "2059f11c-6ddc-470d-bba4-54a8c4dfc22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mv4gzlflei22", "content": "\ud83d\udea8 CVE-2026-75650 (critical-severity) affects Magento Open Source 2.4.4 through 2.4.9. Unauthenticated template injection leads to RCE, no user interaction needed. Actively exploited in the wild. Apply the VULN-39341 hotfix via Composer, no version upgrade yet. \nMore: buff.ly/rMKge9t", "creation_timestamp": "2026-09-09T21:08:02.546690Z"}