Adobe Commerce October security updates: online shops should also check the separate hotfix
Adobe released Commerce security advisory APSB26-153, addressing code execution, privilege escalation and other flaws. It also reminds users that a specific hotfix released separately in September still needs to be applied. The vendor said it was unaware of exploitation of these issues in the wild.
Source Facts
Adobe released APSB26-153 on 13 October, assigning the Commerce updates priority 2 and covering critical, important and moderate issues. Possible impacts include code execution, privilege escalation, file-system writes and security feature bypass.
The advisory separately lists applicable and fixed versions for Commerce, Commerce B2B and Magento Open Source, and reminds users to apply the hotfix described in the September advisory. Adobe said it was unaware of exploitation of these issues in the wild.
Online shop updates should cover core software, extensions and specified hotfixes. After backing up, test checkout, payment integrations and administration functions in a test environment.
Original sources
Security update available for Adobe Commerce | APSB26-153
Sources checked: 2026-10-25 · Compiled with SI agent assistance; not individually reviewed by a human.
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationAmazon Linux updates its Docker security advisory: check container hosts and archive handling
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
Illustration