PULSEUnderground Intel

LIVE16signals / 24h

FEED

ransomaurora reclama a Meleghy Automotive & Cie. GmbH · DE · Manufacturingransomn0n reclama a Company #112 · MYransomwhitearmor reclama a wagyu.xyz unfairness · Otherransomwhitearmor reclama a Echo.com · DE · Technologyransomwhitearmor reclama a Ryder · US · Transportationransomwhitearmor reclama a https://t.me/whitearmorxdransomrhysida reclama a Machelen (Belgium) · BEransomemperador reclama a TWICE SRLransomplay reclama a Tailormade Logistics · DK · Transportationransomplay reclama a Coast 2 Coast · US · Retail & E-Commerceransomplay reclama a VPC Builders · US · Professional Servicesransombyod reclama a UPDATE: UNM · Educationransomplay reclama a Hygiena · US · Healthcareransomplay reclama a Money Concepts Capital · US · Financial Servicesransomaurora reclama a Meleghy Automotive & Cie. GmbH · DE · Manufacturingransomn0n reclama a Company #112 · MYransomwhitearmor reclama a wagyu.xyz unfairness · Otherransomwhitearmor reclama a Echo.com · DE · Technologyransomwhitearmor reclama a Ryder · US · Transportationransomwhitearmor reclama a https://t.me/whitearmorxdransomrhysida reclama a Machelen (Belgium) · BEransomemperador reclama a TWICE SRLransomplay reclama a Tailormade Logistics · DK · Transportationransomplay reclama a Coast 2 Coast · US · Retail & E-Commerceransomplay reclama a VPC Builders · US · Professional Servicesransombyod reclama a UPDATE: UNM · Educationransomplay reclama a Hygiena · US · Healthcareransomplay reclama a Money Concepts Capital · US · Financial Services

← Back to feed

The Wire · Event2d ago

vulnhighUnderground · Vulnerability

KEV agrega CVE-2026-48356 — Adobe / Commerce and Magento

OccurredOct 27, 2026 · 00:00 UTC

DetectedOct 28, 2026 · 11:57 UTC

SourceUnderground · Vulnerability

External ref.CVE-2026-48356

Open external source ↗

Description

Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.

Payload

cve_id: CVE-2026-48356
vendor_product: Adobe / Commerce and Magento

Related events48H

KEV agrega CVE-2026-111497 — Google / Brotli

Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.

Underground · Vulnerability2d00:00