Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

PolyShell: unrestricted file upload in Magento and Adobe Commerce

Sansec
Sansec
Published March 17, 2026Original Report

Excerpt

Sansec discovered and named the PolyShell vulnerability (CVE-2026-48356): a critical flaw in Magento's REST API that lets unauthenticated attackers upload executable files to any store. The attack ...

Read the original report →

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-48356MediumScore 54/100First seen

IOC Relationship Graph

Building graph…