#adobe
15 articles
CVE-2026-71362: Privilege Escalation in Adobe Commerce and Magento
Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user...
CVE-2026-75650: Critical Adobe Commerce and Magento Flaw — CVSS 10, No User Interaction
A template engine injection in Adobe Commerce allows arbitrary code execution with no user interaction at all. CVSS 10.0, actively exploited, CISA deadline 11 September...
CVE-2026-76193, 76195, 76197: three CVSS 10 flaws in Adobe Campaign Classic leading to code execution
Adobe Campaign Classic has three vulnerabilities scored CVSS 10.0 — one SSRF and two OS command injections. Each leads to arbitrary code execution and none requires user interaction...
CVE-2026-48259: SSRF Vulnerability in Adobe Experience Manager
Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker c...
CVE-2026-48356: Unrestricted File Upload in Adobe Commerce
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could explo...
CVE-2026-48358: Improper Output Encoding in Adobe Commerce
Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does...
CVE-2026-48359: XXE Vulnerability in Adobe Experience Manager
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution in the context of the current user....
CVE-2026-48286: incorrect authorization leading to code execution in Adobe Campaign Classic (CVSS 10.0)
Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current ...
CVE-2026-34691: Stored XSS in Adobe Experience Manager Forms JEE
Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scri...
CVE-2026-47938: SSRF leading to arbitrary code execution in Adobe Campaign Classic (CVSS 10.0)
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of th...
CVE-2026-48303: incorrect authorization leading to arbitrary code execution in Adobe Campaign Classic (CVSS 10.0)
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current ...
CVE-2009-3459: 2009 Vulnerability Now Actively Exploited (Adobe)
Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption....
CVE-2026-27304: Improper input validation leading to RCE in Adobe ColdFusion
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio...
CVE-2020-9715: 2020 Vulnerability Now Actively Exploited (Adobe)
Adobe Acrobat contains a use-after-free vulnerability that allows for code execution...
CVE-2026-34621: Prototype pollution leading to RCE in Adobe Acrobat Reader
Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could res...