ET WEB_SPECIFIC_APPS Adobe Commerce & Magento StyleSmuggler Unauthenticated Remote Code Execution (CVE-2026-75650)
Sourceet/open
Fileemerging-web_specific_apps.rules
CreatedSeptember 8, 2026
UpdatedSeptember 8, 2026
Classificationweb-application-attack
alert http any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET WEB_SPECIFIC_APPS Adobe Commerce & Magento StyleSmuggler Unauthenticated Remote Code Execution (CVE-2026-75650)"; flow:established,to_server ; http.uri; content:"/graphql?"; content:"type|3d|"; content:"text|3d 7b 7b|block"; fast_pattern; pcre:"/^[^\x7d]*?class\x3d/R"; content:"styles|5b|"; http.header; to_lowercase; content:"x-"; pcre:"/^(?:[tT][rR][aA][cC][eE]\x2d[a-fA-F0-9]{2})[a-fA-F0-9]{10}/R" ; reference:url,github.com/disrex-group/stylesmuggler-mitigation/ ; reference:cve,2026-75650 ; classtype:web-application-attack; sid:2071957; rev:1; metadata:affected_product Magento, affected_product Adobe_Commerce, attack_target Server, tls_state TLSDecrypt, created_at 2026_09_08, cve CVE_2026_75650, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Exploit, updated_at 2026_09_08, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_name Exploit_Public_Facing_Application; target:dest_ip;)
References
Metadata
affected productAdobe_Commerce
attack targetServer
tls stateTLSDecrypt
created at2026_09_08
deploymentInternal
confidenceHigh
signature severityMajor
tagExploit
updated at2026_09_08
mitre tactic idTA0001
mitre tactic nameInitial_Access
mitre technique idT1190
mitre technique nameExploit_Public_Facing_Application
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!