Adobe security advisory (AV26-697) – Update 1

Imported from official source

Cybersecurity Classified by Officially

Serial number: AV26–697
Date: July 14, 2026
Updated: October 27, 2026

On July 14, 2026, Adobe published security advisories to address critical vulnerabilities in the following products:

  • Adobe After Effects - version 25.6.5 and prior
  • Adobe After Effects - version 26.2.1 and prior
  • Adobe Animate 2023 - version 23.0.15 and prior
  • Adobe Animate 2024 - version 24.0.13 and prior
  • Adobe Audition - version 25.6.4 and prior
  • Adobe Bridge - version 15.1.5 (LTS) and prior
  • Adobe Commerce Events - version 1.6.0 to 1.20.0
  • Adobe Experience Manager (AEM) - version AEM Cloud Service (CS) Release 2026.5.0 and prior
  • Adobe Experience Manager (AEM) - version 6.5 LTS Service Pack 1 and prior
  • Adobe Experience Manager (AEM) - version 6.5 Service Pack 24 and prior
  • Adobe Media Encoder - version 25.6.5 and prior
  • Adobe Media Encoder - version 26.2.2 and prior
  • Adobe Premiere - version 26.2.2 and prior
  • Adobe Premiere Pro - version 25.6.5 and prior
  • ColdFusion 2025 Update 10 and earlier versions
  • ColdFusion 2023 Update 21 and earlier versions
  • ColdFusion 2021 - version 2021.0.0.323925 and prior
  • ColdFusion 2023 - version 2023.0.0.330468 and prior
  • ColdFusion 2025 - version 2023.0.0.331385 and prior
  • Content Credentials Command-Line Tool - version c2patool-v0.17.0 and prior
  • Content Credentials JS SDK - version @contentauth/[email protected] and prior
  • Content Credentials Rust SDK - version c2pa-v0.84.0 and prior
  • Creative Cloud Desktop Application - version 6.9.1.1 and prior
  • Illustrator 2025 - version 29.8.7 and prior
  • Illustrator 2026 - version 30.5 and prior
  • Update 1
    On October 27, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48356 to their Known Exploited Vulnerabilities (KEV) Database.

    This is an extract. The publication continues at the source.

    Source: Canadian Centre for Cyber Security. Licence

    Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-697

    Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

    Provenance

    Organization
    Canadian Centre for Cyber Security — imported from official source
    Official source
    https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
    Imported
    October 27, 2026 21:00
    Versions
    1 recorded
    Identity
    https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-697

    Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.