CYBERSECURITYTRACKER
Permanent story citation

Adobe security advisory (AV26-697) – Update 1

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11513

As cited

Copy frozen at (site build).

vulnerabilities

Adobe security advisory (AV26-697) – Update 1

Adobe published security advisories on July 14, 2026 addressing critical vulnerabilities across numerous products including After Effects, Animate, Audition, Bridge, Commerce, Experience Manager, Media Encoder, Premiere, ColdFusion, Content Credentials tools, Creative Cloud Desktop, Illustrator, and Magento Open Source. On October 27, 2026, CISA added CVE-2026-48356 to the Known Exploited Vulnerabilities (KEV) Database, indicating active exploitation in the wild.

Why it matters: Organizations running Adobe Creative Suite, ColdFusion, Experience Manager, or Magento need to patch immediately for CVE-2026-48356 (CVSS 9.6), which is actively exploited and listed in CISA KEV.

VendorsAdobe
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Adobe security advisory (AV26-697) – Update 1

Adobe published security advisories on July 14, 2026, addressing critical vulnerabilities across multiple products including After Effects, Animate, Audition, Bridge, Commerce, Experience Manager, Media Encoder, Premiere, ColdFusion, Content Credentials tools, Creative Cloud Desktop, Illustrator, and Magento Open Source. On October 27, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48356 to the Known Exploited Vulnerabilities (KEV) Database, indicating active exploitation in the wild.

Why it matters: Organizations running any of these Adobe or ColdFusion products must prioritize patching CVE-2026-48356 immediately, as CISA confirmation of exploitation means attackers are actively targeting this vulnerability.

VendorsAdobe
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Adobe security advisory (AV26-697), Update 1

Adobe published security advisories on July 14, 2026, addressing critical vulnerabilities across multiple products including After Effects, Animate, Audition, Bridge, Commerce, Experience Manager, Media Encoder, Premiere, ColdFusion, Content Credentials tools, Creative Cloud Desktop, Illustrator, and Magento Open Source. On October 27, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48356 to the Known Exploited Vulnerabilities (KEV) Database, indicating active exploitation in the wild.

Why it matters: Organizations running any of these Adobe or ColdFusion products must prioritize patching CVE-2026-48356 immediately, as CISA confirmation of exploitation means attackers are actively targeting this vulnerability.

VendorsAdobe
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary