12 matches found
Magento CVE-2026-71362 Account Takeover Detect
Detects CVE-2026-71362 in Adobe Commerce / Magento Open Source before the APSB26-92 August 2026 patch: failed customer editPost poisons customerformdata and mass-assigns id into the active session. Registers a throwaway account and attempts a benign identity switch. !/usr/bin/env python3 -- codin...
9.1CVSS8.7AI score0.90491EPSS
SaveExploits4References3
20