duke42 Security scan & fix Ongoing care
← Back to Duke42

MAGENTO REPAIR & SECURITY

Protect your store. Keep checkout working.

We repair Magento Open Source and Adobe Commerce, with checks around checkout, customer accounts and admin access.

See recent security issues ↓

One-time repair

FIX NOW

Previously €199 Now €99 / one-time repair

Edition and extensions · Backup · Matching security patches · Checkout and admin checks

Money-back guarantee. If we can’t fix your problem, we’ll refund your payment in full. Prices in EUR; VAT added where applicable.

FREE WEBSITE CHECK

Find your website’s security risks

Recent security issues

5 selected records

24 Jul 2026 – 24 Oct 2026 · Sources checked 24 Oct 2026

Selected Magento Open Source and Adobe Commerce advisories. Commerce B2B findings apply only where that component is installed. This is a selected list, not a complete vulnerability inventory or a scan of your system.

Published

CVE-2026-103849 · APSB26-153

Unauthenticated template code execution

A template-engine flaw can allow arbitrary code execution without an account.

Affected systems & fix
Applies to
Affected Commerce and Magento Open Source releases listed in Adobe’s October bulletin.
What fixes it
Apply the matching October update. The September CVE-2026-75650 hotfix must also be present.
Official source ↗
Published

CVE-2026-92909 · APSB26-153

Commerce B2B authorization flaw

An authorization flaw can allow unauthenticated code execution.

Affected systems & fix
Applies to
Adobe Commerce B2B component on affected versions; not every Magento store.
What fixes it
Apply the B2B patch matching the installed component and release line.
Official source ↗
Published

CVE-2026-76200 / CVE-2026-76201

Stored scripting with privilege escalation

Adobe’s September update addresses critical stored-XSS issues.

Affected systems & fix
Applies to
Affected Magento Open Source and Adobe Commerce releases in APSB26-138.
What fixes it
Apply the matching September fixes and later cumulative updates.
Official source ↗
Published

CVE-2026-75650 · APSB26-146

Actively exploited template injection

Adobe confirmed exploitation of this unauthenticated code-execution vulnerability.

Affected systems & fix
Applies to
Affected Commerce and Magento Open Source releases.
What fixes it
Install Adobe’s dedicated hotfix; confirm it is present even after monthly patching.
Official source ↗
Published

CVE-2026-71362 · APSB26-92

Unauthenticated privilege escalation

Incorrect authorization could expose sensitive data and allow unauthorized changes.

Affected systems & fix
Applies to
Affected Commerce and Magento Open Source installations in the August bulletin.
What fixes it
Apply the matching August fixes and subsequent monthly security updates.
Official source ↗

Not sure which issues affect you?

Send the site or server address and a working contact. We’ll check the installed versions and configuration before making changes. Missing access? Tell us what you have.

Keep it maintained afterwards. Care from €29/month ↗

LET’S GET IT WORKING

What happened?

Tell us what happened and how to reach you. We’ll arrange access separately — don’t share passwords here.

Can’t access it or don’t know the address? You can still ask for help.

Use another email or your phone if your website’s email is down.

Add details or available access optional

We’ll use your details to respond to this request. Access credentials are arranged separately.