https://patchsonar.com/tech/web Exploited vulnerabilities in websites & online stores, in plain English. en-us https://patchsonar.com/cve/CVE-2026-48356 https://patchsonar.com/cve/CVE-2026-48356 Tue, 27 Oct 2026 12:00:00 GMT Websites & online stores Yes. Security firm Sansec says attackers have been planting a hidden loader in store content blocks since at least July 2025. What to do: Install Adobe's security patch for this flaw, then check your store's CMS blocks for code you didn't add. https://patchsonar.com/cve/CVE-2026-109619 https://patchsonar.com/cve/CVE-2026-109619 Mon, 26 Oct 2026 12:00:00 GMT Websites & online stores Yes. CISA confirmed active exploitation on Oct. 26, two days after researchers saw successful attacks on test servers. What to do: Upgrade PHP. If a hosting company runs your site, ask them to confirm they've updated. Check for updates to any software or appliance that bundles PHP. https://patchsonar.com/cve/CVE-2026-109618 https://patchsonar.com/cve/CVE-2026-109618 Mon, 26 Oct 2026 12:00:00 GMT Websites & online stores Yes. CISA confirmed active exploitation on Oct. 26, two days after researchers saw successful attacks on test servers. What to do: Upgrade PHP. If a hosting company runs your site, ask them to confirm they've updated. Check for updates to any software or appliance that bundles PHP. https://patchsonar.com/cve/CVE-2026-87902 https://patchsonar.com/cve/CVE-2026-87902 Fri, 25 Sep 2026 12:00:00 GMT Websites & online stores Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 25, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-71362 https://patchsonar.com/cve/CVE-2026-71362 Thu, 24 Sep 2026 12:00:00 GMT Websites & online stores Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 24, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-75650 https://patchsonar.com/cve/CVE-2026-75650 Tue, 08 Sep 2026 12:00:00 GMT Websites & online stores Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.