Magento CVE-2026-75650 Security Update

We are rolling out an NGINX mitigation for the actively exploited Magento vulnerability CVE-2026-75650 (StyleSmuggler).
The mitigation blocks suspicious GraphQL requests containing the styles flag before they reach Magento.

For the permanent fix, please apply Adobe's official patch:
https://experienceleague.adobe.com/en/docs/commerce-knowledge-base/kb/announcements/commerce-apsb26-146

The temporary NGINX mitigation is added through:
nginx/magento-CVE-2026-75650-fix.conf

If this mitigation cannot or should not be used, remove the file and reload NGINX:
rm -f nginx/magento-CVE-2026-75650-fix.conf
tscli nginx reload