# Critical BlockStrap flaw (CVE-2026-103849) lets attackers run code on Magento / Adobe Commerce servers

> BlockStrap (CVE-2026-103849, CVSS 10.0) is an unauthenticated second-pass template engine directive injection in Adobe Commerce and Magento Open Source email templating that yields remote PHP code execution. Adobe fixed it in APSB26-153 (2026-10-13); no exploitation is observed yet, but Sansec expects rapid weaponization through patch diffing.

- **Published:** 2026-10-16T20:16:46Z
- **Last reviewed:** 2026-10-16T20:16:46Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-3773
- **ID:** TL-2026-3773
- **Severity:** CRITICAL (CVSS 10)
- **Category:** VULNERABILITY
- **Status:** MONITORING
- **Detections:** 9 · **IOCs:** 10 (full data via the Threadlinqs MCP server — Purple tier)
- **CVEs:** CVE-2026-103849, CVE-2026-75650

## Description

BlockStrap, named by Sansec, is a second-pass template engine directive injection in Magento's template filter (vendor/magento/framework/Filter/Template.php). Attacker-controlled content placed in a child email template is signed and then rescanned at the root level, where a smuggled {{block}} directive is executed inside Magento's rendering engine. The result is arbitrary PHP code execution on the server without authentication. Adobe classifies it as CWE-1336 (Improper Neutralization of Special Elements Used in a Template Engine) with CVSS 3.1 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

The flaw exploits a gap left by the fix for StyleSmuggler (CVE-2026-75650, APSB26-146, Adobe hotfix VULN-39341), the actively exploited email-template zero-day from September 2026. Together they are two successive breaks in Magento's email template engine within about six weeks. Adobe's fix in APSB26-153 replaces generic rescanning with registered placeholders. BlockStrap and StyleSmuggler are separate fixes and both must be present.

Affected: Adobe Commerce 2.4.4 through 2.4.9 (2026-sep and earlier), Magento Open Source 2.4.6 through 2.4.9 (2026-sep and earlier), Adobe Commerce B2B 1.3.3 through 1.5.3, and Mage-OS up to 3.5.0 per Sansec. Plain Composer installs retain the vulnerable base version, so the 2026-oct release or Adobe's isolated patch is required.

Exploitation status: Adobe states it is not aware of exploits in the wild and assigned Priority 2. Sansec reports no active attacks as of 2026-10-15, but its researchers identified four distinct attack routes within 24 hours of analysis, and it warns that anyone with an AI agent can reverse-engineer the patch into a working exploit quickly. Sansec deployed Shield protection on 2026-10-14. The sources report no threat actor, PoC release, or network IOCs for BlockStrap. For context, StyleSmuggler was exploited by multiple unrelated attackers beginning 2026-09-04, before disclosure, and the same operators and tooling may be expected to pivot to BlockStrap.

## MITRE ATT&CK

- T1190 Exploit Public-Facing Application
- T1059 Command and Scripting Interpreter
- T1505.003 Server Software Component: Web Shell
- T1588.006 Obtain Capabilities: Vulnerabilities
- T1595.002 Active Scanning: Vulnerability Scanning

## Sources

- [Critical BlockStrap flaw lets hackers run code on Magento servers](https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/)
- [Sansec: BlockStrap Magento RCE](https://sansec.io/research/blockstrap-magento-rce)
- [Adobe Security Bulletin APSB26-153](https://www.adobe.com/trust/security/products/commerce/apsb26-153)
- [Adobe fixes critical Magento zero-day exploited to backdoor servers (StyleSmuggler)](https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-magento-zero-day-exploited-to-backdoor-servers/)
- [Style Smuggler: Actively Exploited Magento/Adobe Commerce RCE 0-Day (CVE-2026-75650)](https://www.ampcuscyber.com/shadowopsintel/stylesmuggler-magento-adobe-commerce-rce-cve-2026-75650/)
- [Rapid response to StyleSmuggler (scandiweb)](https://scandiweb.com/blog/rapid-response-to-stylesmuggler/)
- [APSB26-153 security patches for Magento (Meetanshi)](https://meetanshi.com/blog/apsb26-153-security-patches-magento/)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-3773