StyleSmuggler Magento GraphQL styles[] Template Poisoning RCE

Arnold Chan@slaz

•updated Sep 6, 2026•0•0•1

This rule detects attempted exploitation of Adobe Commerce (Magento) via GraphQL, specifically targeting Template Property Poisoning through malicious 'styles' array injection as observed in the StyleSmuggler campaign (CVE-2025-54236).