The BlockStrap vulnerability, a critical flaw affecting Magento and Adobe Commerce, has been identified by security researchers. This vulnerability, CVE-2026-103849, is a significant concern for e-commerce platforms. According to security firm Sansec, the vulnerability could allow attackers to run arbitrary PHP code on store servers, posing a severe risk to Magento and Adobe Commerce users. Sansec based their assessment on identifying four potential attack paths involving CVE-2026-103849 in less than 24 hours. The flaw impacts September versions of Adobe Commerce and Magento Open Source through 2.4.9 and Adobe Commerce B2B through 1.5.3. The security firm warned that Adobe’s
