Adobe released security updates for Magento and Adobe Commerce to patch a critical zero-day vulnerability, tracked as CVE-2025-28557 and dubbed StyleSmuggler, already exploited to deploy backdoors on vulnerable e-commerce servers. The flaw stems from improper sanitization of CSS styles in the email template editor, allowing unauthenticated attackers to inject malicious code. Security researchers observed active exploitation in the wild before a fix became available. Adobe urges administrators to install the patches immediately, monitor systems for suspicious activity, and review server configurations. Security experts warn that unpatched instances remain attractive targets for data theft and further compromise.
This update represents a notable development in the Ai sector. Organizations and founders tracking this space should evaluate potential strategic and technical implications on their operations.