blockstrap

Here is 1 public repository matching this topic...

dinosn / cve-2026-103849-blockstrap-lab

CVE-2026-103849 (BlockStrap) reproduction lab: unauthenticated {{block}} injection on Magento 2.4.9 via guest GraphQL, A/B vs APSB26-153; command execution only through a labeled synthetic gadget, not stock classes.

docker proof-of-concept magento magento2 rce security-research docker-lab vulnerability-research adobe-commerce patch-analysis cve-2026-103849 blockstrap

Updated Oct 18, 2026
Shell

Add this topic to your repo

To associate your repository with the blockstrap topic, visit your repo's landing page and select "manage topics."

Learn more