CyberSIXT Search
Vendor

Adobe

CVEs tracked · all time
32
in CISA KEV · all time
7
articles · since 11 Sep
5
articles · all time
61

5 articles since 11 Sep; 1 CISA notice, marked below the bars.

Show as table
Adobe: articles per day
Day (UTC)Articles
Wed 23 Sep1
Thu 24 Sep1
Fri 25 Sep2
Tue 20 Oct1
See the full timeline
Products: Acrobat, Acrobat and Reader, Acrobat Reader, Adobe Acrobat PDF Extension (Chrome) and 11 more
AcrobatAcrobat and ReaderAcrobat ReaderAdobe Acrobat PDF Extension (Chrome)Adobe Campaign ClassicAdobe CommerceAdobe Commerce B2BAdobe ConnectAdobe Connect Android Mobile AppAdobe Connect Desktop ApplicationColdFusionColdFusion 2023ColdFusion 2025Commerce and MagentoMagento Open Source

CVEs

32 CVEs
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityCVSS10.0CriticalExploited4.0%EPSS7articles
CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization VulnerabilityCVSS9.1CriticalExploited88%EPSS6articles
CVE-2026-48282Adobe ColdFusion Path Traversal VulnerabilityCVSS10.0CriticalExploited42%EPSS17articles
CVE-2009-3459Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityCVSS8.8HighExploited87%EPSS4articles
CVE-2026-34621Adobe Acrobat and Reader Prototype Pollution VulnerabilityCVSS8.6HighExploited2.2%EPSS13articles
CVE-2020-9715Adobe Acrobat Use-After-Free VulnerabilityCVSS7.8HighExploited33%EPSS6articles
CVE-2025-54236Adobe Commerce and Magento Improper Input Validation VulnerabilityCVSS9.1CriticalExploited95%EPSS1article
CVE-2026-75682Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVSS9.9Critical–Not in KEV0.6%EPSS1article
CVE-2026-75698Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)CVSS9.3Critical–Not in KEV0.3%EPSS1article
CVE-2026-75697Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)CVSS9.3Critical–Not in KEV0.3%EPSS1article
CVE-2026-75689Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)CVSS9.3Critical–Not in KEV0.3%EPSS1article
CVE-2026-75686Adobe Connect | Improper Input Validation (CWE-20)CVSS9.3Critical–Not in KEV0.6%EPSS1article
20 more CVEs
CVE-2026-75684Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)CVSS9.3Critical–Not in KEV0.3%EPSS1article
CVE-2026-48330Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVSS10.0Critical–Not in KEV1.0%EPSS1article
CVE-2026-48323Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)CVSS10.0Critical–Not in KEV1.4%EPSS1article
CVE-2026-48331Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)CVSS10.0Critical–Not in KEV0.9%EPSS1article
CVE-2026-48449Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)CVSS10.0Critical–Not in KEV0.9%EPSS1article
CVE-2026-48448Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVSS8.6High–Not in KEV0.6%EPSS1article
CVE-2026-48294Adobe Acrobat PDF Extension (Chrome) vulnerabilityCVSS7.4High–Not in KEV1.2%EPSS3articles
CVE-2026-48281ColdFusion | Improper Input Validation (CWE-20)CVSS10.0Critical–Not in KEV1.4%EPSS1article
CVE-2026-48277ColdFusion | Improper Input Validation (CWE-20)CVSS10.0Critical–Not in KEV1.3%EPSS1article
CVE-2026-48283ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)CVSS10.0Critical–Not in KEV1.3%EPSS2articles
CVE-2026-48276ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)CVSS10.0Critical–Not in KEV1.3%EPSS2articles
CVE-2026-48313Adobe ColdFusion 2025 vulnerabilityCVSS9.3Critical–Not in KEV3.0%EPSS1article
CVE-2026-48286Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)CVSS10.0Critical–Not in KEV1.2%EPSS1article
CVE-2026-34659Adobe Connect | Deserialization of Untrusted Data (CWE-502)CVSS9.6Critical–Not in KEV0.6%EPSS1article
CVE-2026-34660Adobe Connect vulnerabilityCVSS9.3Critical–Not in KEV1.0%EPSS1article
CVE-2026-27304ColdFusion | Improper Input Validation (CWE-20)CVSS9.3Critical–Not in KEV0.5%EPSS1article
CVE-2026-27305ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVSS8.6High–Not in KEV1.1%EPSS1article
CVE-2026-34619ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVSS7.7High–Not in KEV1.1%EPSS1article
CVE-2026-27282Adobe ColdFusion 2025 vulnerabilityCVSS7.5High–Not in KEV0.8%EPSS1article
CVE-2024-41869Adobe Acrobat Reader vulnerabilityCVSS7.8High–Not in KEV2.4%EPSS1article

Coverage

61 articles, all timeFull timeline RSS feed
  1. AI Agents Target 1,200 Retail Sites in Low Cost Hacking CampaignThe Hacker News
  2. CISA Flags Critical WSO2 and Magento Flaws Used in AttacksSecurity Affairs
  3. CISA Warns of Exploited WSO2 and Adobe Commerce FlawsSecurityOnline
  4. CISA Flags Actively Exploited Critical Flaw in Adobe CommerceCISA · official notice
  5. Adobe Patches Critical Connect and AEM Forms Flaws Enabling Code ExecutionSecurityWeek
  6. CISA Warns of Exploited Magento Flaw Enabling Remote Code ExecutionSecurity Affairs
  7. CVE-2026-41870: Unauthenticated RCE in Apache NutchSecurityOnline
  8. CISA Warns of Actively Exploited Magento Flaw Enabling Code ExecutionCISA · official notice
  9. Adobe and Microsoft Patch 997 Flaws as Exploited Threats Mountthezdi.com
  10. Adobe Patches Actively Exploited Magento Flaw Enabling Server TakeoverThe Hacker News
  11. Adobe Magento Flaw Enables Unauthenticated Code Execution in AttacksSecurityOnline
  12. CVE-2026-71362 Exploited: Adobe Commerce Account Takeover, Details and PoC are PublicSecurityOnline
  13. Adobe Commerce CVE-2026-71362 exploited, accounts hijackedSecurity Affairs
  14. Adobe Commerce flaw CVE-2026-71362 lets attackers hijack accountsSecurityWeek
  15. Adobe Campaign Classic CVE-2026-48331 Scores CVSS 10.0 for Arbitrary Code ExecutionSecurityOnline
  16. Adobe fixed a maximum-severity vulnerability flaw in Campaign ClassicSecurity Affairs
  17. Adobe Acrobat flaw (CVE-2026-48294) leaks WhatsApp Web chatsMalwarebytes
  18. Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theftSecurity Affairs
  19. HermeticReader Flaw in Adobe Extension Leaks WhatsApp DataSecurityWeek
  20. CISA Adds Six KEV Flaws, Including Joomla Extensions and AI BugsSecurityOnline
  21. LineageOS Browser Flash Tool Makes ROM Install EasierSecurityOnline
  22. Network UPS Tools RCE Flaw Affects upsmon, With No Patch YetSecurityOnline
  23. Foxit PDF Reader flaws expose users to arbitrary code executionSecurityOnline
  24. CISA alerts on critical ColdFusion Langflow and Joomla flawsSecurityWeek
  25. Android Remote Root Exploit Chain Unveiled by NebulaSecurityOnline
  26. CISA warns of active exploits in ColdFusion, Joomla page buildersSecurity Affairs
  27. Four flaws hit Joomla, Langflow, ColdFusion and Linux todaySecurityOnline
  28. CISA flags critical Joomla, ColdFusion bugs under attackSecurityOnline
  29. CISA KEV Catalog Flags Adobe ColdFusion CVE-2026-48282 ExploitCISA · official notice
  30. CISA Adds Critical Adobe ColdFusion Flaw CVE-2026-48282 to KEVCISA · official notice
  31. Adobe ColdFusion flaw CVE-2026-48282 exploited hours after patchSecurityWeek
  32. Adobe ColdFusion Users Warned to Patch Critical CVE-2026-48282 FlawInfosecurity
  33. Attackers hit Adobe ColdFusion via CVE-2026-48282 within hoursSecurity Affairs
  34. Weekly Threat Intelligence: The July 2026 BreachesSecurityOnline
  35. Active ColdFusion Arbitrary Code Execution Flaw Scores CVSS 10SecurityOnline
  36. Adobe Fixes ColdFusion, Campaign Classic Bugs Rated CVSS 10.0Security Affairs
  37. Adobe fixes ColdFusion Campaign Classic bugs, urges patchSecurityWeek
  38. CISA Adds Critical Flaws in Windows, Office, Defender to KEV ListSecurity Affairs
  39. CISA Updates KEV Catalog with New Actively Exploited FlawsCISA · official notice
  40. CISA Warns of Active Exploits in Adobe PDF Flaw CVE‑2009‑3459CISA · official notice
  41. CISA adds seven KEV flaws, including 2026 Microsoft Defender bugsCISA · official notice
  42. Adobe fixes 52 flaws, patches Connect code execution bugsSecurityWeek
  43. Exploiters target SAP SQLi and Adobe zero day flaws in AprilThe Hacker News
  44. Microsoft fixes 167 flaws, patches SharePoint zero day exploitKrebs on Security
  45. Adobe Patches 55 Vulnerabilities Across 11 ProductsSecurityWeek
  46. Organizations Warned of Exploited Windows, Adobe Acrobat VulnerabilitiesSecurityWeek
  47. CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV CatalogSecurity Affairs
  48. CISA adds six KEV flaws amid active Fortinet exploitsThe Hacker News
  49. CISA Flags Adobe Acrobat CVE-2020-9715 Flaw, Urges PatchCISA · official notice
  50. Adobe Acrobat Bug CVE-2026-34621 Allows Arbitrary Code ExecutionCISA · official notice

The latest 50 are listed. Every article is in the RSS feed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device