Magento PolyShell: unrestricted file upload in Magento and Adobe Commerce PolyShell lets attackers upload executable files to any Magento or Adobe Commerce store via the REST API. No official patch exists for production versions. M...

#magento exploit in the wild:

sansec.io/research/mag...