VulnSocial

CVE-2026-53787Disclosure

MEDIUMCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by submitting files of any type or name to the upload endpoint without authentication, session validation, or cart context. Attackers can upload PHP files to achieve remote code execution on servers where the media directory permits PHP execution, or alternatively enable malware hosting, stored cross-site scripting via HTML or SVG uploads, and path traversal to write files outside the intended upload directory.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-434

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 5 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 5 signals
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 3 mentions (2026-06-12); latest day: 1
  • 5 total mentions across 3 days

Deep dive

Activity timeline5 mentions / 3d
01223Mentions · 2026-06-12: 3Mentions · 2026-06-13: 1Mentions · 2026-07-09: 1PoC Mentioned / Linked · 2026-07-09: 1Exploit Tool / Code · 2026-07-09: 1Patch / Workaround · 2026-06-12: 1Patch / Workaround · 2026-06-13: 1Technical Details · 2026-06-12: 3Technical Details · 2026-06-13: 1Technical Details · 2026-07-09: 106-1206-1307-09
Signal classification3 categories
Disclosure
240.0%
Patch
240.0%
Exploit
120.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-123
Disclosure2Patch1
2026-06-131
Patch1
2026-07-091
Exploit1
Full discourse5 posts
  • Khadafi Gans@khadafigans_
    Exploit

    CVE-2026-53787: Amasty Order Attributes RCE Exploit Grab it here -> https://github.com/khadafigans/MAGENTO-AMASTY-RCE/ #exploit #RCE #magento https://t.co/B0suTZa2rq

    Post summary

    An exploit for CVE‑2026‑53787, enabling remote code execution on Amasty Order Attributes in Magento, is published on GitHub.

    01010235
    43 followersView on X
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-53787 — CVSS 9.8/10 ██████████ Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/i2tepu4bm6

    Post summary

    CVE-2026-53787 is a critical unauthenticated arbitrary file upload flaw in Amasty Order Attributes for Magento 2, rated CVSS 9.8. A patch is now available – upgrade to version 4.0.0 or later.

    1000048
    59 followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 CRITICAL: CVE-2026-53787 (CVSS 9.8) Amasty Order Attributes for Magento 2 <4.0.0 allows unauthenticated arbitrary file upload → RCE. Attackers can upload PHP files without authentication. Patch immediately! #CVE #PatchNow #ThreatIntel https://t.co/f7pwAJY5gR

    Post summary

    The tweet alerts about a critical CVE‑2026‑53787 that allows unauthenticated arbitrary file upload to execute PHP code on Amasty Order Attributes for Magento 2, and urges immediate patching.

    0000033
    44 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-53787 Unauthenticated Arbitrary File Upload in Amasty Order Attributes Magento... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53787 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    The post merely announces CVE‑2026‑53787 as an unauthenticated arbitrary file upload flaw in Amasty Order Attributes for Magento, offering no PoC, exploit, patch, or evidence of active exploitation.

    0000041
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-53787 Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to wr… https://www.cve.org/CVERecord?id=CVE-2026-53787

    Post summary

    The CVE-2026-53787 entry discloses an unauthenticated arbitrary file upload flaw in Amasty Order Attributes for Magento 2 versions prior to 4.0.0.

    00000107
    57.6K followersView on X

Explore more

Back to dashboard