The attacks are dubbed “SessionReaper”, and although Adobe has released a fix for the bug, Sansec says the majority of Magento stores (almost two-thirds, 62%), are still vulnerable - six weeks after ...
Hackers have started exploiting CVE-2025-54236, a critical-severity vulnerability in Adobe Commerce and Magento Open Source.