# Magento security incidents · pwn.watch

> Security incidents tagged Magento (vendor, product, platform or attack type).

Page: https://pwn.watch/t/magento · generated 2026-10-22T16:42:00.965Z

## Status (as of 2026-10-22)
- Incidents: 4 (0 live, 0 live and not fully patched, 4 patched)
- Days without a Magento security incident: 28
- Newest incident started: 2026-09-24

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/magento.json
- RSS (every update): https://pwn.watch/t/magento/feed.xml
- This file: https://pwn.watch/t/magento/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability ](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362) ([json](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362.json)): high, closed, patched, started 2026-09-24, CVE-2026-71362
- [Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650) ([json](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650.json)): high, closed, patched, started 2026-09-08, CVE-2026-75650
- [Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability](https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236) ([json](https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236.json)): critical, closed, patched, started 2025-10-24, CVE-2025-54236
- [Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)](https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102) ([json](https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102.json)): critical, closed, patched, started 2024-06-13, CVE-2024-34102