abraxas/CVE-2026-75650

PoC

CVE-2026-75650 - Magento Open Source - Critical 10.0 - Unauthenticated POST /graphql - Unauthenticated Remote Code Execution (StyleSmuggler SSTI)

view exploit source poc_in_githubauthor abraxaspublished 2026-09-26catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-75650US	critical10.0OT critical	3.95% (90th)	KEV	2026-09-07
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.