CVE-2026-84395

Adobe Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that could lead to privilege escalation and potentially result in unauthorized write access . Exploitation of this issue does not require user interaction. The CVSS 3.1 score is 7.1 (High) . No specific...

CVE-2026-83963

Substance3D - Modeler is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution within the context of the current user. Exploitation of this flaw requires user interaction, specifically when a victim opens a malicious file . No specific exploit deta...

CVE-2026-81998

The software Substance3D - Modeler is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction , specifically where a victim must open a malicio...

CVE-2026-83962

The software Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability (CWE-121). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Practical exploitation requires user interaction , specifically when a victim open...

CVE-2026-79906

Substance3D - Modeler is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically when a victim opens a malicious file ...

CVE-2026-94462

The open source e-commerce solution Spree is vulnerable to a broken access control (IDOR) issue in versions 5.4.0 through 5.4.4 and 5.5.4 . The vulnerability exists in the Spree::Api::V3::Store::CartsController#associate method, where the PATCH /api/v3/store/carts/:id/associate endpoint uses find...

CVE-2026-75743

Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352). This flaw allows an attacker to bypass security measures and gain unauthorized write access , potentially leading to a limited disruption of availability. Successful exploitation require...

CVE-2026-75745

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability (CWE-863) that could lead to arbitrary code execution in the context of the current user. An attacker could exploit this issue without requiring any user interaction. While specific technical root causes or...

CVE-2026-82000

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). A low-privileged attacker can exploit this flaw to achieve privilege escalation and gain elevated access to internal resources . The vulnerability requires no user interaction for explo...

CVE-2026-75744

Adobe Experience Manager Forms JEE is impacted by a stored Cross-Site Scripting (XSS) vulnerability. A high-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser upon visiting the affected page. This could result in the attacker gaining ...

CVE-2026-81995

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability (CWE-20) that can lead to arbitrary code execution in the context of the current user. An attacker with high privileges can exploit this issue without requiring any user interaction. The vulnerability has...

CVE-2026-81999

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that can lead to privilege escalation . An attacker with high privileges can exploit this issue to gain elevated access to internal resources. Exploitation does not require any user inte...

CVE-2026-75689

Adobe Connect is impacted by a stored Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this by injecting malicious scripts into vulnerable form fields . When a victim navigates to the page containing these fields, the malicious JavaScript may execute in their browser, potential...

CVE-2026-83964

Adobe Connect is affected by an Improper Certificate Validation vulnerability (CWE-295). This flaw could allow an attacker to disclose sensitive memory and other sensitive information. Notably, exploitation of this issue does not require any user interaction. For remediation, users should refer t...

CVE-2026-34689

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. This flaw could allow an attacker to perform an arbitrary file system read , gaining access to sensitive files and directories outside the intended access scope. Exploitatio...

CVE-2026-75686

The software Adobe Connect is impacted by an Improper Input Validation vulnerability (CWE-20). A remote attacker can exploit this flaw to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically requiring a victim to...

CVE-2026-75682

The Adobe Connect platform is affected by an SQL Injection vulnerability (CWE-89) caused by the Improper Neutralization of Special Elements used in an SQL Command. A low-privileged attacker can exploit this flaw without user interaction to execute arbitrary SQL commands, which may lead to arbitra...

CVE-2026-48361

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can abuse this flaw to inject malicious scripts into vulnerable form fields . When a victim browses to the page containing the affected field, the malicious JavaScript may be executed in their bro...

CVE-2026-75698

Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this flaw by tricking a victim into visiting a maliciously crafted URL or interacting with a compromised web page. Successful exploitation allows the attacker to inject malicious sc...

CVE-2026-75684

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this by injecting malicious scripts into vulnerable form fields . When a victim navigates to the page containing the compromised field, the malicious JavaScript may execute in their browser. Th...