pwn.watch: Magento incident updates https://pwn.watch/t/magento Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:42:01 GMT [high] Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability : CISA added CVE-2026-71362 to the KEV catalog (due 2026-09-27). https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362 adobe-commerce-and-magento-cve-2026-71362:2026-09-24:CISA added CVE-2026-71362 to the KEV catalog (due 2026-09-27). Thu, 24 Sep 2026 00:00:00 GMT high Status: closed, patched [high] Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability: CISA added CVE-2026-75650 to the KEV catalog (due 2026-09-11). https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650 adobe-commerce-and-magento-cve-2026-75650:2026-09-08:CISA added CVE-2026-75650 to the KEV catalog (due 2026-09-11). Tue, 08 Sep 2026 00:00:00 GMT high Status: closed, patched [critical] Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability: CISA added CVE-2025-54236 to the KEV catalog (due 2025-11-14). https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236 adobe-commerce-and-magento-cve-2025-54236:2025-10-24:CISA added CVE-2025-54236 to the KEV catalog (due 2025-11-14). Fri, 24 Oct 2025 00:00:00 GMT critical Status: closed, patched [critical] Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE): CISA added CVE-2024-34102 to the KEV catalog (federal deadline 2024-08-07) https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102 adobe-commerce-and-magento-open-source-cve-2024-34102:2024-07-17:CISA added CVE-2024-34102 to the KEV catalog (federal deadline 2024-08-07) Wed, 17 Jul 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE): CVE-2024-34102 published https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102 adobe-commerce-and-magento-open-source-cve-2024-34102:2024-06-13:CVE-2024-34102 published Thu, 13 Jun 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-34102 Status: closed, patched