Category
Magento
-
PHP: two critical vulnerabilities, updates since 21 October 2026
On 21 October 2026 PHP fixed two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619). Which versions contain the fixes and what Magento shops should do now.
-
PolyShell: file upload vulnerability in Magento 2 under mass exploitation
PolyShell lets attackers upload files to Magento shops without logging in. What is affected, how to check your shop and which updates fix the vulnerability.
-
The Red Hat incident: what it means for Magento shops
In 2025 attackers compromised a GitLab instance used by Red Hat Consulting. What is confirmed, what is not, and which precautions make sense for Magento shops.
-
SessionReaper (CVE-2025-54236): critical vulnerability in Magento 2
SessionReaper is a critical vulnerability in the REST API of Magento 2 and Adobe Commerce. What it allows, which patch fixes it and what to check if you patched late.
-
The programmer as architect: how I use AI in development
I use AI tools to develop faster and keep prices down. What I use them for, what I do not, and how I make sure the result is secure and stable.
-
Magento security update June 2025: CVE-2025-47110 and APSB25-50
In June 2025 Adobe fixed several vulnerabilities in Magento 2 with APSB25-50, including CVE-2025-47110. Affected versions, updates and what the vulnerability requires.
-
Keep running Magento 1 securely, with Mage-One
Adobe ended support for Magento 1 in 2020. Together with Mage-One, I keep Magento 1 shops running with security patches and current PHP versions.
-
Magento hosting for small and medium-sized shops
Magento needs more than standard web hosting. What a Magento server should provide and what my managed hosting includes.
-
Magento 2.4.6-p7 and 2.4.7-p2: the August 2024 security update
With APSB24-61 Adobe fixed several critical vulnerabilities in Magento 2 in August 2024. Affected versions, the matching updates and an isolated patch for Apache servers.
-
Magento 2.4.6-p6 and 2.4.7-p1: the June 2024 security updates
Magento 2.4.6-p6 and 2.4.7-p1 fix CosmicSting among other issues. What is in these patch releases, which one applies to you and how to apply it safely.
-
CosmicSting (CVE-2024-34102): critical vulnerability in Magento 2
CosmicSting is a critical XXE vulnerability in Magento 2 and Adobe Commerce. Which versions are affected, which updates fix it and what to do after updating.
-
Magento 2.4.7: what changes for payments and checkout
Magento 2.4.7 adds rate limiting for payment APIs, changes the checkout email check and supports PHP 8.3. What that means for shops and payment extensions.