Adobe security advisory (AV26-1039)

Imported from official source

Cybersecurity Classified by Officially

Serial number: AV26-1039
Date: October 14, 2026

As of October 13, 2026, Adobe is affected by vulnerabilities in the following products:

  • Adobe Bridge
    • Prior to or equal to 16.0.7
  • Adobe Bridge (LTS)
    • Prior to or equal to 15.1.8
  • Adobe ColdFusion 2025
    • Version 2025.0.13
  • Adobe ColdFusion 2023
    • Version 2023.0.25
  • Adobe Commerce
    • Multiple versions
  • Adobe Commerce B2B
    • Multiple versions
  • Adobe Credentials SDK
    • Multiple versions
  • Adobe Dimension
    • Prior to or equal to 4.1.8
  • Adobe Experience Manager
    • Multiple versions
  • Adobe FrameMaker 2022
    • Prior to or equal to 17.0.9.866
  • Adobe FrameMaker 2026
    • Prior to or equal to 18.0.0.206
  • Adobe Photoshop 2026
    • Prior to or equal to 27.10
  • Adobe Photoshop 2025
    • Prior to or equal to 26.11.7
  • Adobe Substance 3D Designer
    • Prior to or equal to 16.05
  • Adobe Substance 3D Sampler
    • Prior to or equal to 6.0.3
  • Adobe Substance 3D Stager
    • Prior to or equal to 3.1.8
  • Magento Open Source
    • Multiple versions

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

This is an extract. The publication continues at the source.

Source: Canadian Centre for Cyber Security. Licence

Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-1039

Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
Canadian Centre for Cyber Security — imported from official source
Official source
https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
Imported
October 14, 2026 16:00
Versions
1 recorded
Identity
https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-1039

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.