Adobe Commerce CVE-2026-71362 exploited, accounts hijacked

ADOBE Commerce's critical flaw, CVE-2026-71362, has come under attack shortly after its public disclosure, allowing unauthenticated attackers to hijack customer accounts and access sensitive data. Registered with a CVSS score of 9.1, the vulnerability affects multiple Adobe Commerce versions. Following the disclosure, cybersecurity firm Sansec reported blocking early exploitation attempts. Adobe has released patches that address this and other vulnerabilities, advising users to update their systems immediately. The exploit does not require prior account access or user interaction, heightening security concerns.