#ParsedReport #CompletenessMedium
08-09-2026

StyleSmuggler (CVE-2026-75650): Magento, Adobe Commerce Affected by 0-day RCE

https://kudelskisecurity.com/research/stylesmuggler-cve-2026-75650-magento-adobe-commerce-affected-by-0-day-rce

Report completeness: Medium

Actors/Campaigns:
Lazarus

Threats:
Stylesmuggler_vuln

Victims:
Magento open source, Adobe commerce

Geo:
Dprk

CVEs:
CVE-2026-18963 [Vulners]
CVSS V3.1: 9.1,
Vulners: Exploitation: True

CVE-2026-75650 [Vulners]
CVSS V3.1: 10.0,
Vulners: Exploitation: True


TTPs:
Tactics: 3
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1059, T1190, T1221

IOCs:
IP: 8
Hash: 5
Url: 1
Domain: 10

Soft:
Linux, Redis

Algorithms:
sha256

Win Services:
synctime

Languages:
php, rust

Platforms:
arm, x64