Tag
webshop
-
PHP: two critical vulnerabilities, updates since 21 October 2026
On 21 October 2026 PHP fixed two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619). Which versions contain the fixes and what Magento shops should do now.
-
PolyShell: file upload vulnerability in Magento 2 under mass exploitation
PolyShell lets attackers upload files to Magento shops without logging in. What is affected, how to check your shop and which updates fix the vulnerability.
-
The Red Hat incident: what it means for Magento shops
In 2025 attackers compromised a GitLab instance used by Red Hat Consulting. What is confirmed, what is not, and which precautions make sense for Magento shops.
-
SessionReaper (CVE-2025-54236): critical vulnerability in Magento 2
SessionReaper is a critical vulnerability in the REST API of Magento 2 and Adobe Commerce. What it allows, which patch fixes it and what to check if you patched late.
-
Keep running Magento 1 securely, with Mage-One
Adobe ended support for Magento 1 in 2020. Together with Mage-One, I keep Magento 1 shops running with security patches and current PHP versions.
-
Magento 2.4.6-p6 and 2.4.7-p1: the June 2024 security updates
Magento 2.4.6-p6 and 2.4.7-p1 fix CosmicSting among other issues. What is in these patch releases, which one applies to you and how to apply it safely.
-
CosmicSting (CVE-2024-34102): critical vulnerability in Magento 2
CosmicSting is a critical XXE vulnerability in Magento 2 and Adobe Commerce. Which versions are affected, which updates fix it and what to do after updating.
-
Magento 2.4.7: what changes for payments and checkout
Magento 2.4.7 adds rate limiting for payment APIs, changes the checkout email check and supports PHP 8.3. What that means for shops and payment extensions.
-
Who is behind maxanoo
I am Sebastian Keutmeier and have been building online shops and web applications for more than 15 years. What I do and how I work.