A newly disclosed vulnerability dubbed 'PolyShell' affects all Magento Open Source and Adobe Commerce stable version 2 installations, allowing unauthenticated code execution and account takeover.
CVE-2026-3888 is a high-severity Local Privilege Escalation (LPE) vulnerability that allows unprivileged users to gain full root access on default installations of Ubuntu 24.04 LTS and later.