Hackers exploit critical Adobe Commerce flaw to hijack customer accounts

A critical vulnerability in Adobe's Commerce and Magento e-commerce platforms, identified as CVE-2026-71362, is being exploited by hackers to hijack customer accounts. This flaw allows attackers to gain unauthorized access, potentially leading to sensitive data breaches and financial losses. The vulnerability is considered high-risk, and its exploitation can have severe consequences for affected businesses and their customers. According to recent reports¹, attackers are actively targeting this vulnerability, highlighting the need for immediate attention and patching. The exploitation of CVE-2026-71362 expands the active attack surface, making it essential for organizations to prioritize their security measures based on exposure and exploitation evidence. This vulnerability poses a significant threat to e-commerce businesses, and its exploitation can result in substantial financial and reputational damage, so it is crucial for practitioners to take prompt action to secure their systems and protect customer accounts.