CISA Adds Adobe Commerce and Brotli Flaws to KEV Amid Active PolyShell Exploits

CISA has added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog following active exploitation in the wild. The flaws impact Adobe Commerce/Magento and Google’s Brotli decoder library. Attackers are leveraging these security gaps to breach hundreds of online stores using PolyShell attacks and crafted Brotli traffic, necessitating immediate patching for administrators managing e-commerce infrastructure.