The team plans the patch deployment based on the severity (routine vs critical) and the storefront’s specific exposure to the patched vulnerabilities. That meant that for a single critical security patch you had to perform a full upgrade, with potential risks and testing effort as a result. Remaining on an unsupported version puts your store at risk of security vulnerabilities, compliance issues, and loss of support. PCI compliance at risk from end of 2026 — plan upgrade or migration before the end of 2026 to maintain PCI compliance.
Guest customer prefix (Mr/Mrs) is now saved during checkout.Previously, salutations selected by guest customers were lost before reaching the final order, while all other address fields transferred correctly.AC-14705 The system now will not throw internal server error with message when the selected option that no longer exists Resolved an issue where the billing address was not automatically populated during checkout when In-Store Pickup was selected as the delivery method. Optimized the analytics_collect_data cron job performance for large databases by updating report validation queries to use LIMIT 1 instead of LIMIT 0. After the fix, JavaScript dependencies are loaded only once, eliminating duplicate requests while keeping existing mixin functionality intact.
The patches deploy successfully, the storefront functions, and a subtle regression goes unnoticed until customers encounter it. The discipline reduces but does not eliminate the patch-application cost on customized storefronts. When patches are applied, the customizations may need to be updated alongside the patches, sometimes substantially. The deployment window should be selected for low traffic when possible (off-peak hours for B2C, off-business hours for B2B), with the monitoring focus tuned to catch any issues quickly. The patching at this cadence usually requires compressing the standard QA process, with risk acceptance for testing depth that would normally be deeper. The urgency reflects the active exploitation – every day that the vulnerability remains unpatched is a day of elevated incident risk.
Previously, launching a GraphQL query that used GetCustomSelectedOptionAttributes with an integer argument resulted in a type error. Previously, this scenario would result in a fatal error due to maximum execution time being exceeded. Customers can easily log into their PayPal account, view the order, and access the tracking link.

Speeding Up the Magento Admin: Why Your Adobe Commerce Backend Is Slow and How to Fix It

Now, the empty response is properly generated and products widget is being displayed fine in preview. Large content was leading to canvas element overflowing the browser’s limits, and returning incorrect https://best-adobe-commerce-cloud-agencies.com/ value, which broke backend code (cannot properly decode the image). Previously can’t upload the image via the media gallery and the sync command also fails when a specific image is in the gallery.

Multi-Store from One Admin Panel

Previously, the validation would fail even when a file was selected, preventing the form from being submitted. The system now correctly validates the file field in a UI component form, allowing the form to be submitted without error when a file is selected. The system now correctly recognizes JSON column types in the database schema during integration tests, preventing test failures due to a mismatch between the database schema and the declarative schema. Previously, incorrect spelling of these variables could lead to errors during local code reviews. By using innerText, it will avoid the risk of HTML injection, as these properties automatically escape any HTML special characters in the provided text.
Many businesses postpone updates because they fear downtime or compatibility issues. Adobe prioritizes fixing these vulnerabilities because they present the highest level of risk. Certain vulnerabilities allow users with limited permissions to gain higher-level administrative access. Adobe strongly recommends installing the latest security patches as soon as possible to minimize security risks. Delaying security patches can leave customer data, payment information, and your online reputation at risk.

Previously, the status message for the maintenance mode command was displayed as “active” or “not active”, which could lead to confusion. The system now provides more accurate status messages for the maintenance mode command, changing the status from “active” to “enabled” and from “not active” to “disabled”. Fixed an issue where GraphQL calls using the OPTIONS method returned a 500 Internal Server Error when the adobe-commerce/storefront-compatibility package was installed. Fixed an issue where applying a conflicting coupon with a higher priority resulted in an error message without returning the updated cart data. Updated the GraphQL logic to ensure that previously created returns remain accessible even when RMA is disabled globally.

• This caused tier prices and category permissions for the new admin to be based on the previous company’s customer group, leading to incorrect pricing and permissions.The system now correctly updates the company admin’s Customer Group ID when the admin is changed.
• The system now supports HTML formatting in the “Terms and Conditions” checkbox text on the storefront, allowing for enhanced customization and readability.
• Previously, the “Select All”/“Unselect All” buttons for related products didn’t work correctly if a product was manually selected.

Customer’s shopping cart items no longer disappear as result of a product being deleted after it was added to the shopping cart. Added missing functionality Remember Me from customer login to authentication popup and checkout sign ins. Previously if “Number of Customer Addresses Limit” is configured to 1, and customer has more than one address, the selected billing address would disappear after reloading the page. Checkout performance has been improved when attributes used in cart price rules conditions are not present for all products and when MAP (Minimum advertised price) feature is enabled.

Assistant Manager Thomasina Sandland, hailing from Chatsworth enjoys watching movies like Topsy-Turvy and Kite flying. Took a trip to Gondwana Rainforests of Australia and drives a Bentley Litre Supercharged Le Mans.