#Adobe
All CosmicBytez Labs articles tagged #Adobe, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-48356: Adobe Commerce and Magento Unrestricted File Upload Added to CISA KEV
CISA lists CVE-2026-48356, an unrestricted dangerous file upload flaw in Adobe Commerce and Magento that can lead to code execution, in its KEV catalog.
- News
ThreatsDay Bulletin: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor and 23 More
This week's bulletin covers an Adobe AEM RCE chain, a DNS-based crypto wallet drainer, an NVIDIA container escape, a self-healing WP backdoor, plus 23 more.
- News
Adobe Patches 176 Vulnerabilities Across 11 Products
Adobe's October 2026 update fixes 176 flaws across AEM, ColdFusion, Photoshop, and more, aided by AI-assisted vulnerability hunting.
- News
Adobe's September 2026 Patch Tuesday Fixes 170+ Flaws Across Experience Manager, ColdFusion & More
Adobe patched over 170 vulnerabilities this cycle, led by 107 in Experience Manager and critical RCEs in ColdFusion and Campaign Classic.
- News
Adobe Patches Three CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe's August 2026 patch cycle fixes 3 maximum-severity RCE vulnerabilities across ColdFusion and Campaign Classic. Priority 1 — patch within 72 hours.
- News
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Adobe has patched a maximum-severity vulnerability in Campaign Classic (ACC), its enterprise marketing automation platform. The flaw carries a perfect...
- Security
CVE-2026-48449: Maximum Severity RCE in Adobe Campaign Classic
Adobe Campaign Classic is affected by a CVSS 10.0 Incorrect Authorization vulnerability enabling arbitrary code execution with no user interaction...
- News
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Researchers at Guardio disclosed a now-patched vulnerability chain in the Adobe Acrobat Chrome extension dubbed HermeticReader, which could allow...
- News
In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops
A weekly cybersecurity roundup covering the DHS database breach, Adobe accelerating its patch release schedule, Canada's law enforcement disruption of...
- Security
CVE-2026-48276: Adobe ColdFusion Critical File Upload RCE (CVSS 10.0)
Adobe ColdFusion versions 2023.20 and 2025.9 and earlier contain a critical unrestricted file upload vulnerability that allows unauthenticated remote...
- Security
CVE-2026-48277: Adobe ColdFusion Critical Input Validation RCE (CVSS 10.0)
Adobe ColdFusion versions 2023.20 and 2025.9 and earlier contain an improper input validation vulnerability enabling unauthenticated remote code...
- Security
CVE-2026-48281: Adobe ColdFusion Input Validation RCE Zero-Day (CVSS 10.0)
A second critical improper input validation flaw in Adobe ColdFusion allows unauthenticated remote code execution in the context of the current user. Part...
- Security
CVE-2026-48282: Adobe ColdFusion Critical Path Traversal to RCE (CVSS 10.0)
Adobe ColdFusion contains a critical path traversal vulnerability (CWE-22) that enables unauthenticated remote code execution. The flaw is part of Adobe's...
- Security
CVE-2026-47928: Adobe ColdFusion Critical RCE — CVSS 9.6
Adobe ColdFusion 2023.19 and 2025.8 are affected by a critical improper input validation flaw enabling unauthenticated remote code execution with scope change.
- News
Adobe Patches Actively Exploited Zero-Day That Lingered for Months
Adobe has patched an actively exploited zero-day in Acrobat and Reader that threat actors have been weaponizing via malicious PDF files since at least...
- Security
CVE-2026-34621: Adobe Acrobat Reader Prototype Pollution
Adobe Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by a critical prototype pollution vulnerability (CWE-1321) that can lead...
- News
Adobe Reader Zero-Day Exploited via Malicious PDFs Since
Threat actors have been exploiting an unpatched zero-day in Adobe Reader since at least November 2025, using specially crafted PDFs to fingerprint victims...
- News
Hackers Exploiting Acrobat Reader Zero-Day Flaw Since
Attackers have been silently exploiting an unpatched zero-day vulnerability in Adobe Acrobat Reader since at least November 2025, using malicious PDFs to...