Adobe News Articles

CISA orders feds to patch max severity ColdFusion flaw by Friday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commercial web app development platform by Friday.

21 hours ago

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) - IT Security News

CVE-2026-48282, one of the maximum severity vulnerabilities patched in Adobe ColdFusion on June 30, 2026, has been targeted by attackers in the wild. Exploitation attempts were detected on July 2, through the honeypot sensors of cybersecurity threat-intelligence service KEVIntel, mere…Read more →

2 days ago

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) - Help Net Security

CVE-2026-48282, one of the maximum severity vulnerabilities patched in Adobe ColdFusion on June 30, 2026, has been targeted by attackers.

2 days ago

Hackers Exploit Maximum Severity Adobe ColdFusion Flaw

Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0

2 days ago

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

Hackers are exploiting a critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.

2 days ago

Max severity Adobe ColdFusion flaw now exploited in attacks

Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to vulnerability intelligence company KEVIntel.

3 days ago

Week In Review: Acrobat Reader Flaw Exploited, Claude Mythos Offensive Capabilities And Limits - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos:

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Bringing governance and visibility to machine and AI

Adobe Patches Exploited Zero-Day That Lingered for Months

An attacker has been using maliciously crafted PDF files to exploit a zero-day in Adobe Acrobat and Reader for at least four months.

Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw

Adobe has released an emergency security update for Acrobat Reader to fix a vulnerability, tracked as CVE-2026-34621, that has been exploited in zero-day attacks since at least December.

Adobe Patches Acrobat Reader 0-Day Vulnerability Exploited in the Wild - IT Security News

Adobe has issued an emergency security patch to neutralize a critical zero-day vulnerability in Acrobat Reader that is currently being exploited in the wild. Tracked as CVE-2026-34621, this severe flaw enables threat actors to achieve arbitrary code execution on compromised machines.…Read more →

Adobe issues emergency fix for Acrobat Reader flaw exploited in the wild (CVE-2026-34621) - IT Security News

Adobe has pushed out an emergency security update for Adobe Acrobat Reader, patching a zero-day vulnerability (CVE-2026-34621) exploited in the wild since November 2025. About CVE-2026-34621 CVE-2026-34621 is a critical prototype pollution vulnerability – a type of vulnerability that occurs…Read mor...

Adobe issues emergency fix for Acrobat Reader flaw exploited in the wild (CVE-2026-34621) - Help Net Security

Adobe releases emergency security update for Adobe Acrobat Reader, patching a zero-day flaw (CVE-2026-34621) exploited in the wild.

Adobe Patches Acrobat Reader 0-Day Vulnerability Exploited in the Wild

Adobe patched Adobe Acrobat Reader for a critical zero-day enabling remote code execution, actively exploited in the wild.

Adobe Patches Reader Zero-Day Exploited for Months

Adobe released emergency patches for CVE-2026-34621, a critical Acrobat and Reader zero-day that has been exploited in the wild.

Adobe brings Security Updates to tackle CVE-2026-34621 vulnerability

Adobe has brought in updates to fix a critical vulnerability that was allowing attackers to access users' system local files.

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621

Adobe patches CVE-2026-34621 after active exploitation since Dec 2025, preventing remote code execution via malicious PDFs.

Magento Input Validation Vulnerability Exploited In Wild To Hijack Session And Execute Malicious Codes

A critical vulnerability in Magento, the popular e-commerce platform, is now rebranded as Adobe Commerce. Dubbed SessionReaper and tracked as CVE-2025-54236, this improper input validation flaw allows attackers to hijack user sessions and, in some cases, execute malicious code remotely.

Hackers Can Hijack Accounts Without Logging In ‘SessionReaper’ Critical Flaw Hits Adobe Commerce and Magento - 247News

The National Computer Emergency Response Team (NCERT) has warned of a critical vulnerability—tracked as CVE-2025-54236 and dubbed SessionReaper in Adobe Commerce and Magento Open Source that allows attackers

Security Affairs newsletter Round 547 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs in your email box

Critical vulnerability CVE-2025-54236 in Adobe Commerce (Magento) | Born's Tech and Windows World

[German]A critical vulnerability, CVE-2025-54236, has been found in Adobe Commerce software (formerly Magento). Adobe Commerce allows unauthenticated attackers to upload files and, ultimately, even take over...

U.S. CISA adds Microsoft WSUS, and Adobe Commerce and Magento Open Source flaws to its Known Exploited Vulnerabilities catalog

The U.S. CISA added Microsoft WSUS, and Adobe Commerce and Magento Open Source flaws to its Known Exploited Vulnerabilities (KEV) catalog.

Fear the 'SessionReaper': Adobe Bug Under Attack

CVE-2025-54236 is a critical flaw in Adobe Commerce (formerly Magento) that allows attackers to remotely take over sessions on the e-commerce platform.

Hackers Exploit Magento, Adobe Commerce RCE to Deploy Webshells

The flaw, tracked as CVE-2025-54236 and dubbed SessionReaper, enables remote code execution and customer account takeover on thousands of online stores.

Critical Adobe Commerce, Magento vulnerability under attack (CVE-2025-54236) - Help Net Security

Attackers are trying to exploit CVE-2025-54236, a critical vulnerability affecting Adobe Commerce and Magento Open Source.