The zero-day enables remote code execution (RCE) by smuggling malicious payloads through what Sansec describes as a previously unknown attack vector. This allows threat actors to backdoor online stores and potentially steal payment data or compromise the entire infrastructure underlying the e-commerce platform.

• Both Adobe Commerce and Magento Open Source installations are at risk.
• No official patch was available at the time of Sansec's disclosure, leaving stores vulnerable to active exploitation.
• Sansec has stated it is publishing early indicators of compromise and mitigation guidance for merchants.

Given the lack of a vendor-supplied fix, administrators are urged to audit their systems for signs of intrusion immediately and apply any available workarounds provided by security researchers. The exact technical mechanics of the vulnerability have not been fully disclosed to prevent further abuse while the zero-day remains open.

Source: The Hacker News

Is your team already taking steps to trace unauthorized file changes or review server logs for the specific attack patterns Sansec mentioned, or are you waiting for an official patch before intervening?