Adobe September 2026 Monthly Patch (MCLOUD-15053)

More like this

• StyleSmuggler Deferred Directives Fix

  Root-cause patch that restricts directive signing to explicitly deferred directives (like inlinecss), preventing signatures on unresolved directives exploited in the StyleSmuggler chain. Includes ready-to-apply patches for versions 2.4.5–2.4.9 and instructions for using composer-patches/cweagans.

  https://github.com/bigbridge-nl/magento2-stylesmuggler-deferred-directives-fix

  #StyleSmuggler #security-patch #templates #composer-patches

  09 Sep 2026

• Mage-OS

  Mage-OS 3.5.0 Emergency Security Release

  Ports the StyleSmuggler (CVE-2026-75650, CVSS 10.0) hotfix with added hardening, includes September isolated patch APSB26-138, and fixes four bugs. Provides remediation guidance for possible compromises and notes ACL and template/block policy changes that may affect previews and custom directives.

  https://mage-os.org/releases/2026-09-08-mage-os-3-5-0-release/

  #mage-os #security-patch #vulnerability #release-notes #StyleSmuggler

  09 Sep 2026

• Security Update Available (APSB26-138)

  Official bulletin for APSB26-138 detailing impacted versions, severity ratings, CVEs, and fixed releases. Only partial content was accessible during fetch; open the link for full details.

  https://helpx.adobe.com/security/products/magento/apsb26-138.html

  #security #vulnerability #security-patch #release-notes #StyleSmuggler

  09 Sep 2026