Scott Robinson

Adobe Commerce and Magento_Reward provide no native method of exporting reward points.

This post follows on from the StyleSmuggler exploit coverage: the VULN-39341 patch analysis and removing Adobe’s Fastly rules that break admin page saves.

Adobe’s response to CVE-2026-75650 did not stop at the composer patches and the cloud-patches 1.1.21 release.

You can view the official release notes for APSB26-138 on the Adobe site.

CVE-2026-75650 / APSB26-146.

A store I work on started receiving a flood of contact enquiry emails - a couple of hundred in the space of a few minutes, all from a single host.

If you’ve ever pulled a Magento 2 project and found bin/magento, lib/, dev/ or setup/ simply aren’t there, you’re not going crazy - those directories are deployed out of the magento/magento2-base package by Composer rather than living in the repo.

If you do any local development against HTTPS you’ll eventually hit Chrome’s NET::ERR_CERT_AUTHORITY_INVALID interstitial - the full-page “Your connection is not private” warning.

If you’re running Klevu alongside Magento’s Multi-Source Inventory (MSI) and products are showing the wrong stock status in your Klevu index, the cause turned out to be fairly subtle - and the fix is a single config setting.

Adobe Commerce Cloud manages your infrastructure services for you, but knowing exactly which versions of Valkey, MariaDB and RabbitMQ are running on your environments isn’t always obvious.

If you’ve been keeping an eye on the Magento security space recently, you’ll have seen the research from Sansec around SessionReaper exploitation and the more recent PolyShell - both of which use the media/custom_options/ directory as a vector for uploadi…

Magento’s built-in telephone validation for customer accounts is fairly strict - it only allows digits, spaces, parentheses, plus signs and hyphens.

If you’ve ever updated a product’s URL key via the Magento 2 REST API and then wondered why the old URL is now returning a 404, you’ve probably missed the url_key_create_redirect custom attribute.

I recently ran into a fairly puzzling issue on an Adobe Commerce site where some products were behaving oddly on the frontend.

If you want to disable the AI mode button that appears in Chrome’s omnibox/address bar then you can do so via Chrome flags.

If you want to go back to Opus 4.5, start hashtag#claude with: claude --model claude-opus-4-5-20251101 You can also edit your config file to set this as the default if you want to use it by default rather than 4.6.

I recently ran into a “No signature” error when trying to get my git commits verified and it sent me down a bit of a rabbit hole.

Adobe have changed the way they usually release security patch updates for 2026, but sadly their communcations around the release leaves quite a bit to be desired.

If you’re running into this issue with Adobe Commerce deployments, it’s due to the older versions of composer now being marked as having a few security issues (“PKSA-1gck-s111-yq7g”, “PKSA-b8f7-zn44-r4gz”, “PKSA-s25b-vbmp-jvhh”): Installing build dependen…

One of the more interesting things I’ve had to debug this year was why Magento was apparently returning 400 responses to builder.io for certain webhook payloads.

If you’re running multiple import processes simultaneously in Adobe Commerce or Magento 2, you might encounter a frustrating bug where the imports interfere with each other, causing data corruption or import failures.

There are times when you need to either list or activate an old version of your Fastly configuration but you may not be able to access your Magento/Adobe Commerce control panel to do so.

If you ever need the ability to flush Fastly but can’t acess an Adobe Commerce admin panel to do so, you can run the following curl request: curl -H "Fastly-Key: API_KEY” -X POST "https://api.fastly.com/service/SERVICE_ID/purge_all" You can fetch both yo…

If you’re using Adobe’s B2B extension and recently tried upgrading then you likely hit this issue: W: Unable to apply data patch Magento\Company\Setup\Patch\Data\SetComp W: anyForStructure for module Magento_Company.

If you’ve recently deployed one of the latest release lines of Magento on Commerce Cloud and have: REDIS_BACKEND: '\Magento\Framework\Cache\Backend\RemoteSynchronizedCache' [2025-04-08T10:29:29.486342+00:00] ERROR: Magento version '2.4.7.0-patch5' does…

If you use Laravel’s Request object and had previously used the $request->getContentType() method then in Laravel 12, it’s been changed to $request->getContentTypeFormat() : Old: /** * */ class ApiRequestHandler { /** * @param Illuminate\Http\R…