2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
38 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-89276 Adobe Campaign | CRITICAL9.9 | Adobe Campaign | CWE-94 Code Injection | 0.5% | Sep 22, 2026 |
| CVE-2026-83660 Adobe Campaign | CRITICAL9.9 | Adobe Campaign | CWE-918 Server Side Request Forgery | 0.3% | Sep 22, 2026 |
| CVE-2026-82443 Adobe Campaign | CRITICAL9.6 | Adobe Campaign | CWE-918 Server Side Request Forgery | 0.4% | Sep 22, 2026 |
| CVE-2026-82009 Adobe Campaign | CRITICAL9.1 | Adobe Campaign | CWE-89 SQL Injection | 1.0% | Sep 22, 2026 |
| CVE-2026-77774 Adobe Commerce | HIGH8.6 | Adobe Commerce | CWE-863 Incorrect Authorization | 0.8% | Sep 8, 2026 |
| CVE-2026-48415 Adobe Commerce | HIGH7.6 | Adobe Commerce | CWE-863 Incorrect Authorization | 0.5% | Aug 11, 2026 |
| CVE-2026-48414 Adobe Commerce | HIGH7.7 | Adobe Commerce | CWE-79 Cross Site Scripting | 0.3% | Aug 11, 2026 |
| CVE-2026-21273 Adobe Coldfusion | HIGH8.7 | Adobe Coldfusion | CWE-20 Improper Input Validation | 0.9% | Aug 11, 2026 |
| CVE-2026-48449 Adobe Campaign | CRITICAL10.0 | Adobe Campaign | CWE-863 Incorrect Authorization | 0.9% | Jul 30, 2026 |
| CVE-2026-48374 Adobe Bridge | HIGH7.8 | Adobe Bridge | CWE-22 Path Traversal | 0.3% | Jul 28, 2026 |
| CVE-2026-48334 Adobe Illustrator | CRITICAL9.3 | Adobe Illustrator | CWE-20 Improper Input Validation | 1.0% | Jul 14, 2026 |
| CVE-2026-48324 Adobe Coldfusion | CRITICAL9.1 | Adobe Coldfusion | CWE-89 SQL Injection | 1.1% | Jul 14, 2026 |
| CVE-2026-48321 Adobe Coldfusion | CRITICAL9.3 | Adobe Coldfusion | CWE-863 Incorrect Authorization | 0.4% | Jul 14, 2026 |
| CVE-2026-48320 Adobe Coldfusion | HIGH8.5 | Adobe Coldfusion | CWE-79 Cross Site Scripting | 0.4% | Jul 14, 2026 |
| CVE-2026-48319 Adobe Coldfusion | CRITICAL9.1 | Adobe Coldfusion | CWE-22 Path Traversal | 1.4% | Jul 14, 2026 |
| CVE-2026-48284 Adobe Coldfusion | CRITICAL9.6 | Adobe Coldfusion | CWE-20 Improper Input Validation | 0.5% | Jul 14, 2026 |
| CVE-2026-48358 Adobe Commerce | CRITICAL9.1 | Adobe Commerce | CWE-116 | 1.2% | Jul 14, 2026 |
| CVE-2026-48356 Adobe Commerce | CRITICAL9.3 | Adobe Commerce | CWE-434 Unrestricted File Upload | 1.0% | Jul 14, 2026 |
| CVE-2026-47995 Adobe Commerce | HIGH8.1 | Adobe Commerce | CWE-79 Cross Site Scripting | 0.7% | Jul 14, 2026 |
| CVE-2026-47994 Adobe Commerce | HIGH8.7 | Adobe Commerce | CWE-79 Cross Site Scripting | 0.7% | Jul 14, 2026 |
| CVE-2026-47988 Adobe Commerce | HIGH8.6 | Adobe Commerce | CWE-863 Incorrect Authorization | 0.8% | Jul 14, 2026 |
| CVE-2026-47984 Adobe Commerce | HIGH8.2 | Adobe Commerce | CWE-863 Incorrect Authorization | 0.7% | Jul 14, 2026 |
| CVE-2026-48294 Adobe Acrobat | HIGH7.4 | Adobe Acrobat | CWE-79 Cross Site Scripting | 1.2% | Jun 17, 2026 |
| CVE-2026-47937 Adobe Acrobat Dc | HIGH7.7 | Adobe Acrobat Dc | CWE-427 | 0.3% | Jun 9, 2026 |
| CVE-2026-47932 Adobe Coldfusion | HIGH8.8 | Adobe Coldfusion | CWE-22 Path Traversal | 0.5% | Jun 9, 2026 |
| CVE-2026-47931 Adobe Coldfusion | HIGH8.4 | Adobe Coldfusion | CWE-20 Improper Input Validation | 0.5% | Jun 9, 2026 |
| CVE-2026-47929 Adobe Coldfusion | HIGH8.4 | Adobe Coldfusion | CWE-863 Incorrect Authorization | 0.5% | Jun 9, 2026 |
| CVE-2026-47928 Adobe Coldfusion | CRITICAL9.6 | Adobe Coldfusion | CWE-20 Improper Input Validation | 0.5% | Jun 9, 2026 |
| CVE-2026-47907 Adobe Dreamweaver | HIGH8.6 | Adobe Dreamweaver | CWE-284 Improper Access Control | 0.3% | Jun 9, 2026 |
| CVE-2026-34693 Adobe Experience Manager | HIGH8.0 | Adobe Experience Manager | CWE-79 Cross Site Scripting | 0.6% | Jun 9, 2026 |
| CVE-2026-34691 Adobe Experience Manager | CRITICAL9.3 | Adobe Experience Manager | CWE-79 Cross Site Scripting | 0.7% | Jun 9, 2026 |
| CVE-2026-34632 Adobe Photoshop Installer | HIGH8.6 | Adobe Photoshop Installer | CWE-427 | 0.3% | Apr 15, 2026 |
| CVE-2026-34615 Adobe Connect | CRITICAL9.3 | Adobe Connect | CWE-502 Deserialization of Untrusted Data | 1.8% | Apr 14, 2026 |
| CVE-2026-27303 Adobe Connect | CRITICAL9.6 | Adobe Connect | CWE-502 Deserialization of Untrusted Data | 1.9% | Apr 14, 2026 |
| CVE-2026-27246 Adobe Connect | CRITICAL9.3 | Adobe Connect | CWE-79 Cross Site Scripting | 0.7% | Apr 14, 2026 |
| CVE-2026-27245 Adobe Connect | CRITICAL9.3 | Adobe Connect | CWE-79 Cross Site Scripting | 0.7% | Apr 14, 2026 |
| CVE-2026-27243 Adobe Connect | CRITICAL9.3 | Adobe Connect | CWE-79 Cross Site Scripting | 0.7% | Apr 14, 2026 |
| CVE-2026-27238 Adobe Indesign | HIGH7.8 | Adobe Indesign | CWE-122 Heap Buffer Overflow | 0.3% | Apr 14, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications