Security researchers have created exploit code for CVE-2022-24086, the critical vulnerability affecting Adobe Commerce and Magento Open Source that Adobe patched in an out-of-band update last Sunday. The vulnerability, which Adobe saw being exploited in the wild in very limited attacks, received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Positive Technologies researchers told us that developing a complete exploit is quite a difficult task if technical details are not available.”]

