Critical BlockStrap flaw lets hackers run code on Magento servers

October 14, 2026 · 5:38 pm 3 sources

Image: BleepingComputer

Coverage

Coverage

• Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
  BleepingComputer · October 15, 2026 20:25
  Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
• Critical BlockStrap flaw lets hackers run code on Magento servers
  BleepingComputer · October 16, 2026 20:00
  Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]

More coverage

• Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
  The Hacker News · October 14, 2026 17:38
  Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an…