Adobe News Articles

Week in review: Accenture data breach, great open-source cybersecurity tools - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Securing the inbox: Where identity, brand and security

1 week ago

CISA Warns of Adobe ColdFusion Path Traversal Vulnerability Exploited in Attacks - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Adobe ColdFusion vulnerability, tracked as CVE-2026-48282, to its Known Exploited Vulnerabilities (KEV) catalog, warning that the flaw is being actively exploited in real-world attacks. The issue stems from…Read mo...

1 week ago

CISA Warns of Actively Exploited Adobe ColdFusion Vulnerability - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Adobe ColdFusion, tracked as CVE-2026-48282, to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability is actively being exploited in the wild. Disclosed on July 7, 2026,…Read more →

2 weeks ago

CISA orders feds to patch max severity ColdFusion flaw by Friday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commercial web app development platform by Friday.

2 weeks ago

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below – CVE-2026-48282 (CVSS score: 10.0) – A path traversal…Read more →

2 weeks ago

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) - IT Security News

CVE-2026-48282, one of the maximum severity vulnerabilities patched in Adobe ColdFusion on June 30, 2026, has been targeted by attackers in the wild. Exploitation attempts were detected on July 2, through the honeypot sensors of cybersecurity threat-intelligence service KEVIntel, mere…Read more →

2 weeks ago

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) - Help Net Security

CVE-2026-48282, one of the maximum severity vulnerabilities patched in Adobe ColdFusion on June 30, 2026, has been targeted by attackers.

2 weeks ago

Hackers Exploit Maximum Severity Adobe ColdFusion Flaw

Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0

2 weeks ago

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

Hackers are exploiting a critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.

2 weeks ago

Max severity Adobe ColdFusion flaw now exploited in attacks

Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to vulnerability intelligence company KEVIntel.

2 weeks ago

Week In Review: Acrobat Reader Flaw Exploited, Claude Mythos Offensive Capabilities And Limits - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos:

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Bringing governance and visibility to machine and AI

Adobe Patches Exploited Zero-Day That Lingered for Months

An attacker has been using maliciously crafted PDF files to exploit a zero-day in Adobe Acrobat and Reader for at least four months.

Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw

Adobe has released an emergency security update for Acrobat Reader to fix a vulnerability, tracked as CVE-2026-34621, that has been exploited in zero-day attacks since at least December.

Adobe Patches Acrobat Reader 0-Day Vulnerability Exploited in the Wild - IT Security News

Adobe has issued an emergency security patch to neutralize a critical zero-day vulnerability in Acrobat Reader that is currently being exploited in the wild. Tracked as CVE-2026-34621, this severe flaw enables threat actors to achieve arbitrary code execution on compromised machines.…Read more →

Adobe issues emergency fix for Acrobat Reader flaw exploited in the wild (CVE-2026-34621) - IT Security News

Adobe has pushed out an emergency security update for Adobe Acrobat Reader, patching a zero-day vulnerability (CVE-2026-34621) exploited in the wild since November 2025. About CVE-2026-34621 CVE-2026-34621 is a critical prototype pollution vulnerability – a type of vulnerability that occurs…Read mor...

Adobe issues emergency fix for Acrobat Reader flaw exploited in the wild (CVE-2026-34621) - Help Net Security

Adobe releases emergency security update for Adobe Acrobat Reader, patching a zero-day flaw (CVE-2026-34621) exploited in the wild.

Adobe Patches Acrobat Reader 0-Day Vulnerability Exploited in the Wild

Adobe patched Adobe Acrobat Reader for a critical zero-day enabling remote code execution, actively exploited in the wild.

Adobe Patches Reader Zero-Day Exploited for Months

Adobe released emergency patches for CVE-2026-34621, a critical Acrobat and Reader zero-day that has been exploited in the wild.

Adobe brings Security Updates to tackle CVE-2026-34621 vulnerability

Adobe has brought in updates to fix a critical vulnerability that was allowing attackers to access users' system local files.

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621

Adobe patches CVE-2026-34621 after active exploitation since Dec 2025, preventing remote code execution via malicious PDFs.

Magento Input Validation Vulnerability Exploited In Wild To Hijack Session And Execute Malicious Codes

A critical vulnerability in Magento, the popular e-commerce platform, is now rebranded as Adobe Commerce. Dubbed SessionReaper and tracked as CVE-2025-54236, this improper input validation flaw allows attackers to hijack user sessions and, in some cases, execute malicious code remotely.

Hackers Can Hijack Accounts Without Logging In ‘SessionReaper’ Critical Flaw Hits Adobe Commerce and Magento - 247News

The National Computer Emergency Response Team (NCERT) has warned of a critical vulnerability—tracked as CVE-2025-54236 and dubbed SessionReaper in Adobe Commerce and Magento Open Source that allows attackers

Security Affairs newsletter Round 547 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs in your email box

Critical vulnerability CVE-2025-54236 in Adobe Commerce (Magento) | Born's Tech and Windows World

[German]A critical vulnerability, CVE-2025-54236, has been found in Adobe Commerce software (formerly Magento). Adobe Commerce allows unauthenticated attackers to upload files and, ultimately, even take over...