CERT24Adobe Commerce PolyShell attacks breach hundreds of stores as Brotli exploitation traffic emergesLoading data…
CERT24Threat Observatory
Period

Adobe Commerce PolyShell attacks breach hundreds of stores as Brotli exploitation traffic emerges

CISA added two vulnerabilities affecting Adobe Commerce, Magento, and Google's Brotli decoder to its KEV catalog, citing evidence of active exploitation. Sansec reported that attackers used CVE-2026-48356, known as PolyShell, to breach hundreds of e-commerce stores. Exploitation attempts and in-the-wild traffic targeting CVE-2026-111497 have also been observed.

← Back to intelligence

Adobe Commerce PolyShell attacks breach hundreds of stores as Brotli exploitation traffic emerges

CISA added two vulnerabilities affecting Adobe Commerce, Magento, and Google's Brotli decoder to its KEV catalog, citing evidence of active exploitation. Sansec reported that attackers used CVE-2026-48356, known as PolyShell, to breach hundreds of e-commerce stores. Exploitation attempts and in-the-wild traffic targeting CVE-2026-111497 have also been observed.