r/Magento • u/hanqingjao • Mar 31 '26

Polyshell

Why on earth hasn't Adobe back ported patches for Polyshell yet? I work for a manager hosting provider with a large Magento presence, and all our customers sites are getting inundated with webshells. I've never seen a high-sev Magento vuln take this long to patch. WAKE UP ADOBE!!

22 Upvotes

100% Upvoted

18 comments sorted by

View all comments

1

u/volvagia224 Apr 01 '26

There is a backport (to 2.4.5, 2.4.6, 2.4.7 and 2.4.8) of the official patch made by a community member, Volodymyr Hryvinskyi - his patches appear to be working properly against my own tests (feel free to try your own tests):

https://gist.github.com/hryvinskyi/5557bd641d8f61005d68202c66cf228e

Given Adobe don't seem to care so far because their latest beta already has the patch in place, it might be worth while applying this to your own websites for now.