A new, unpatched vulnerability dubbed ‘StyleSmuggler’ in Magento Open Source and Adobe Commerce is being actively exploited. This zero-day allows attackers to execute arbitrary code on online store servers without authentication. The Dutch e-commerce security company Sansec discovered the flaw and reported attacks began on September 4th. Online store operators are urged to monitor their systems and apply patches as soon as they become available.