PT-2026-96982

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description Adobe Bridge contains a stack-based buffer overflow, which occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This flaw could...

PT-2026-96981

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue could result in arbitrary code...

PT-2026-96909

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

PT-2026-96985

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An improper input validation issue allows for arbitrary code execution within the context of the current user. This occurs when a victim visits a maliciously crafted URL or interacts wi...

CVE-2026-34689: Improper Limitation of a Pathname to a Restricted Directory

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

PT-2026-96968

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows for arbitrary file system read. This issue enables an attacker to access sensitive...

CVE-2026-82008: Improper Input Validation

Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...

CVE-2026-89275: Improper Control of Generation of Code

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

CVE-2026-82013: Server-Side Request Forgery (SSRF)

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

PT-2026-96916

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code flaw allows for code injection, which could result in arbitrary code execution in the context of the current user. This issue is...

CVE-2026-75684: Improper Neutralization of Input During Web Page Generation

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

CVE-2026-75745: Incorrect Authorization

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

Adobe InDesign < 20.5.5 / 21.0 < 21.6.0 Multiple Application denial-of-service (APSB26-145) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 20.5.5, 21.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-145 advisory. - InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an...

PT-2026-96910

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Neutralization of Special Elements used in an SQL Command, known as SQL Injection, allows a low-privileged attacker to bypass security features. This issue...

PT-2026-97011

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An Improper Certificate Validation issue exists where the software fails to properly verify digital certificates. This flaw allows an attacker to disclose sensitive information from the...

CVE-2026-89276: Improper Control of Generation of Code

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

CVE-2026-82443: Server-Side Request Forgery (SSRF)

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

PT-2026-96908

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...

PT-2026-96895

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...

CVE-2026-48361: Improper Neutralization of Input During Web Page Generation

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope ...