[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":57,"vulnerability-29945":64,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":97,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":103},[4,13,23,35,43,50],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":8,"variant":12,"priority":12,"campaign_id":6},"PHP2Shell, Node2Shell, *sshole detections - pricing page","node2shell-exploit","Detect PHP2Shell, Node2Shell & *sshole with every paid plan.",null,false,[11],"\u002Fpricing","secondary",{"title":14,"slug":15,"text":16,"link":17,"external":18,"targets":19,"cta":22,"variant":12,"priority":12,"campaign_id":15},"Office Hours #15","office-hours-15","[Live Office Hours, Wed Nov 18] Behind the login, beyond the scan","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_BUp1qET2THa_5h65whpx9g",true,[20,21],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot",{"title":24,"slug":25,"text":26,"link":27,"external":9,"targets":28,"cta":34,"variant":12,"priority":12,"campaign_id":25},"*sshole, PHP2Shell & Node2Shell - HP, Vuln DB, product page","sshole-detect-exploit","🚨 Detect *sshole & Node2Shell with any paid plan. Get proof with our Sniper exploit","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[29,30,31,32,33],"\u002F","\u002Fvulnerabilities-exploits","\u002Fvulnerabilities-exploits\u002Fopenssh-musl-authentication-bypass-cve-2026-123158-sshole_29981","\u002Fvulnerabilities-exploits\u002Fnode2shell-http2shell-brotli-decoder-remote-code-execution_29896","\u002Fproduct","See pricing options",{"title":36,"slug":37,"text":38,"link":27,"external":9,"targets":39,"cta":41,"variant":12,"priority":12,"campaign_id":42},"*sshole - Exploit on Sniper: Auto-Exploiter page","sshole-exploit-sniper","🚨 Exclusive exploit for *sshole now live",[40],"\u002Fexploit-helpers\u002Fsniper","Use it with the Exploit plan","sshole-exploit",{"title":44,"slug":45,"text":46,"link":27,"external":18,"targets":47,"cta":49,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - Exploit on the NS page","sshole-exploit-ns","🚨 Go beyond *sshole detection: get proof of exploitation",[48],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick the Exploit plan",{"title":51,"slug":52,"text":53,"link":27,"external":18,"targets":54,"cta":34,"variant":12,"priority":12,"campaign_id":42},"*sshole exploit - WS, free tools","sshole-exploit-mainpw","Detect *sshole with every paid plan. Prove it with Exploit.",[55,56],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffor\u002Ffree",["Island",58],{"key":59,"params":60,"result":62},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":61},"{}",{"head":63},{},{"id":65,"detectable_with":66,"vuln_details":72,"vuln_id":94,"name":95,"published":96,"updated":96},29945,{"tool":67,"engine":70},{"id":68,"name":69},1,"Network Scanner",{"id":68,"name":71},"Sniper",{"id":65,"codename":8,"description":73,"severity":74,"risk_description":75,"public_description":76,"public_recommendation":77,"recommendation":78,"references":79,"cvssv3":83,"epss_score":84,"epss_percentile":85,"cve":86,"in_cisa_catalog":18,"date":88,"software_type":89,"vendor":90,"product":91,"ptt_exploit_capabilities":92},"We found that the target server is vulnerable to CVE-2026-71362, an unauthenticated account takeover affecting Adobe Commerce \u002F Magento Open Source. The flaw is an incorrect authorization issue (CWE-863) in the customer account edit flow: a failed password change leaves the raw, attacker-controlled form data in the session, and the next request to the edit page copies every submitted key - including the mass-assigned id - onto the customer object via DataObjectHelper::populateWithArray(), so the session calls setCustomerId() with an attacker-chosen value. Rewriting the customer id alone satisfies isLoggedIn(), rebinding the authenticated session to any customer account with no password or ownership check. We confirmed this by registering a throwaway customer and reading another customer's account page (name and e-mail) through our own session.","critical","An attacker can gain elevated access to sensitive customer resources and perform account takeover or access another user's personal data, impacting confidentiality and integrity. Given that exploitation requires no user interaction and is remotely accessible, the likelihood of exploitation is high and the potential impact is severe.","Adobe Commerce (Magento) contains an incorrect authorization flaw in its customer session handling that enables an attacker to switch a customer session identity and escalate privileges. The issue stems from improper access control in customer account\u002Fsession-related endpoints, allowing manipulation of session state and profile data without proper authorization checks. Exploitation does not require user interaction and can be performed remotely by sending crafted requests to customer account and session endpoints, leading to account takeover and disclosure of other customers' personal data.","Apply the Adobe Commerce \u002F Magento security update (APSB26-92) immediately.","We recommend applying the vendor security update APSB26-92 for Adobe Commerce \u002F Magento Open Source immediately. If patching is not immediately possible, restrict or harden access to the customer account and session endpoints (e.g. block POST requests carrying an id or customer_group_id parameter to customer\u002Faccount\u002FeditPost) and monitor for suspicious session activity.",[80,81,82],"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71362","https:\u002F\u002Fhelpx.adobe.com\u002Fsecurity\u002Fproducts\u002Fmagento\u002Fapsb26-92.html","https:\u002F\u002Fsansec.io\u002Fresearch\u002Fadobe-commerce-account-takeover-apsb26-92",9.1,0.91677,0.99816,[87],"CVE-2026-71362","2026-08-11T00:00:00Z","eCommerce","Adobe","Magento",[93],"CUSTOM","NETSCAN-SNIPER-CVE-2026-71362","Adobe Commerce\u002FMagento - Account Takeover via Customer Session Identity Switch","2026-10-13T00:00:00Z",["Island",98],{"key":99,"params":100,"result":101},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":61},{"head":102},{},["Island",104],{"key":105,"params":106,"result":108},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":107},"{\"text-color\":\"gray\"}",{"head":109},{}]