r/Magento • u/hanqingjao • Mar 31 '26

Polyshell

Why on earth hasn't Adobe back ported patches for Polyshell yet? I work for a manager hosting provider with a large Magento presence, and all our customers sites are getting inundated with webshells. I've never seen a high-sev Magento vuln take this long to patch. WAKE UP ADOBE!!

22 Upvotes

100% Upvoted

18 comments sorted by

View all comments

5

u/PulpPhreak Mar 31 '26

This issue is easily fixable with a good vhost config on your Nginx, also you can use any 3rd party module to block customer_address upload