CISA KEV: CVE-2026-75650 — Adobe Commerce and Magento actively exploited

Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability. Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’