Vulnerability in REST API allows attackers to upload executable files.
Unrestricted file upload: all #Magento #OpenSource and #AdobeCommerce versions up to 2.4.9-alpha2
#XSS: all versions pre-2.3.5 or custom webserver config
#RCE via #PHP upload: #nginx 2.0.0–2.2.x (via index.php filename), any non-stock version nginx passing all .php to fastcgi, #Apache pre-2.3.5 without php_flag engine 0
Patched: 2.4.9-alpha3+ (pre-release only)
HOW TO APPROACH ADOBE COMMERCE 2.4.9 SAFELY
Plan your Adobe Commerce 2.4.9 upgrade the right way. Talk to our experts today and secure a smooth, risk-free release.
Pickour team: https://www.ziffity.com/adobe-commerce/
#AdobeCommerce #Magento #MagentoUpgrade #eCommerceDevelopment
🎙️ Premiere! Florian Sydekum und ich starten unseren neuen Podcast: Commerce Champions.
Wir sprechen über Adobe Commerce, Magento Open Source und alles drumherum.
RSS Feed URL:
I just released the first update of the year for n98-magerun2. Version 9.2.1 is out now!
This release includes: ✨ A handy new feature 🐛 Three bugfixes
Update your tools and check the release notes here: https://magerun.net/release-9-2-0/
Happy New Year, Magento Community! We are happy to announce our first release of the year. This release, codenamed Mannheim, contains a small but handy new feature: you can now filter the cronjob list using a wildcard character. Example: n98-magerun2.phar sys:cron:list security* The release also includes two bug fixes. One is a very small fix
Rather than buying useless junk today, how about sponsoring your favorite open source projects?
(Or me at https://github.com/sponsors/JosephLeedy.)
Der 53. Magento Stammtisch Rhein-Main liegt hinter uns. 👋
Persönliche Treffen sind durch nichts zu ersetzen – besonders wenn es um technische Deep-Dives und den Austausch über das Ökosystem geht. Danke an alle, die dabei waren!
Wer wissen möchte, was besprochen wurde und wie mein Fazit ausfällt, findet hier meinen aktuellen Blogpost dazu:
📝 https://muench.dev/post/2025-11-rueckblick-auf-den-53-magento-stammtisch-rhein-main
Es war mal wieder soweit: Die Magento Community im Rhein-Main-Gebiet traf sich zur 53. Ausgabe des Stammtischs. Diesmal hatte e3n nach Mainz eingeladen, und die Räumlichkeiten wurden freundlicherweise von der Thiele & Klose GmbH zur Verfügung gestellt.Was mich besonders gefreut hat: Der Stammtisch war richtig gu...
Today’s fun project was figuring out how tax calculation in #Magento works. After spelunking in the core code all day, I think I put something together that might work. I’ll know tomorrow after I write some integration tests for my logic. 🤞🏽
github.com/ghostwriter
Marcel SIneM(S)US
Ziffity
Christian Münch
Joseph Leedy 
