Adobe Commerce Under Active Attack, Microsoft Authenticator Token Theft

The Daily CVE Update · Oct 28, 2026 · 11m

Adobe Commerce Under Active Attack, Microsoft Authenticator Token Theft

CISA has confirmed active exploitation of a critical file upload vulnerability in Adobe Commerce and Magento, moving CVE-2024-48356 to the Known Exploited Vulnerabilities catalogue. The flaw permits arbitrary code execution on affected e-commerce platforms, posing immediate risk to UK small businesses relying on these systems for revenue. Separately, Microsoft has patched a critical authentication token theft vulnerability in Authenticator for Android (CVE-2026-80097), which allowed malicious apps to impersonate trusted…