Adobe
CISA Adds Exploited Adobe Commerce File-Upload Flaw to KEV
CISA added exploited Adobe Commerce CVE-2026-48356 to KEV. Match the exact branch, preserve evidence, apply Adobe's update, validate, and retain records.
Adobe Premiere Pro Update Addresses 1 Vulnerability
Premiere Pro 26.5 and 25.6.6 address an SSRF security-feature bypass. Update the matching branch and validate projects, plugins and exports; the advisory does not establish an internet-facing code-execution vulnerability.
Adobe Substance 3D Modeler Update Addresses 4 Vulnerabilities
Substance 3D Modeler 1.22.8 fixes four memory-safety flaws that can permit code execution with user interaction. Deploy the stated fixed release and verify the application version before resuming untrusted-asset workflows.
Adobe AEM Forms on JEE Update Addresses 6 Vulnerabilities
AEM Forms on JEE needs its branch-specific service pack or hotfix for six Critical flaws. A 6.5.25 base installation remains affected without the required hotfix; verify every applicable node.
Adobe Connect Update Addresses 9 Vulnerabilities
Adobe Connect and its Android app require separate updates for flaws including code execution, file reads and privilege escalation. Inventory both the deployment and client fleet; authentication and interaction requirements differ across the nine issues.
Adobe Bridge Update Addresses 7 Vulnerabilities
Adobe Bridge 15.1.8 LTS and 16.0.7 fix six code-execution flaws and one memory-exposure flaw requiring user interaction. Update the installed branch; Adobe reports no known exploitation in the wild.
Adobe Content Credentials SDK Update Addresses 7 Vulnerabilities
Adobe Content Credentials updates address security-feature bypass and denial of service in the Rust SDK and C2PA Tool. Update embedded c2pa dependencies and standalone c2patool separately, rebuilding and redeploying consuming applications where required.
Adobe InDesign Update Addresses 2 Vulnerabilities
Adobe InDesign updates fix two user-interaction-dependent flaws that can crash the application on Windows and macOS. Install 21.6 or 20.5.5 for the appropriate branch; the bulletin does not describe code execution.