Security Center

Get the latest patches, security updates, and best practices for your Magento sites

New Security Update

Install critical updates for Magento 1.x and Magento 2.x versions

See the Details

NEW! Magento Security Scan Tool

Monitor your sites for security risks, update malware patches, and detect unauthorized access with Magento Security Scan, the latest FREE tool from Magento Commerce.

Go to Security Scan

< Security Center

Filter by topic

Tagged:

Patches

Patches
SUPEE-11346
Jun 22, 2020

Magento has released updates for Magento Commerce 1 and Magento Open Source 1. For more information on security updates available for Magento 1. Please see Security updates available for Magento | APSB20-41.

Patches
Magento 2.3.5-p1 and 2.3.4-p2 Security Updates
Apr 28, 2020

Magento has released updates for Magento Commerce and Open Source editions. For more information on security updates available for Magento, please see APSB20-22 for details.

Patches
Hot fix available for CVE-2019-8118
Mar 24, 2020

Magento advises customers of potentially affected deployments to take immediate action by updating Magento installations with the latest patch.

Patches
Magento 2.3.4, 2.3.3-p1 and 2.2.11 Security Update
Jan 28, 2020

With the release of Magento 2.3.4, we’ve changed how we describe security issues. Individual issues are no longer described here in the Magento Security Center. Instead, these issues are documented in an Adobe Security bulletin. Please see Security updates available for Magento | APSB20-02.

Patches
SUPEE-11295
Jan 28, 2020

With the release of Magento 2.3.4, we’ve changed how we describe security issues. Individual issues are no longer described here in the Magento Security Center. Instead, these issues are documented in an Adobe Security bulletin. Please see Security updates available for Magento | APSB20-02.

Patches
Latest Magento Security Update Helps Protect from Recently Reported RCE Vulnerability
Nov 11, 2019

Magento is committed to delivering security updates to our customers. Because most exploits tend to target software installations that are not up-to-date with the latest security updates, we always strongly recommend that users install security updates as soon as they are available.

Patches
Magento 2.3.3 and 2.2.10 Security Update
Oct 8, 2019

Magento Commerce and Open Source 2.3.3, 2.3.2-p1 and 2.2.10 contain tens of security enhancements that help close Remote Code Execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities.

Merchants who have not previously downloaded a Magento 2 release should go straight to Magento Commerce or Open Source 2.3.3.

Patches
SUPEE-11219
Oct 8, 2019

SUPEE-11219, Magento Commerce 1.14.4.3 and Open Source 1.9.4.3 contain multiple security enhancements that help close remote code execution (RCE), cross-site scripting (XSS), cross-site request forgery (CSRF) and other vulnerabilities.

Patches
Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 3/3
Jun 25, 2019

Magento 2.3.2, 2.2.9, and 2.1.18 contain 75 critical security enhancements. These enhancements are described in three related blog posts — the post you’re currently reading plus these two separate posts, which you can find here: Part 1 and Part 2.

Patches
Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 2/3
Jun 25, 2019

Magento 2.3.2, 2.2.9, and 2.1.18 contain 75 critical security enhancements. These enhancements are described in three related blog posts — the post you’re currently reading plus these two separate posts, which you can find here: Part 1 and Part 3.