CYBERSECURITYTRACKER
Permanent story citation

Adobe security advisory (AV26-808) - Update 1

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 6996

As cited

Copy frozen at (site build).

vulnerabilities

Adobe security advisory (AV26-808) - Update 1

Adobe released security advisory AV26-808 on August 12, 2026, covering vulnerabilities in Campaign Classic, Commerce, ColdFusion, Content Credentials tools, Lightroom Classic, and Magento Open Source. An update issued September 10, 2026, confirms that CVE-2026-71362 (CVSS 9.1) is under active exploitation in the wild.

Why it matters: Organizations running Adobe Commerce, ColdFusion, Campaign Classic, or Lightroom Classic must prioritize patching CVE-2026-71362 immediately, as this critical vulnerability is actively exploited and affects multiple product lines across different versions.

VendorsAdobe
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Adobe security advisory (AV26-808) – Update 1

Adobe released security advisory AV26-808 on August 12, 2026, covering vulnerabilities in Campaign Classic, Commerce, ColdFusion, Content Credentials tools, Lightroom Classic, and Magento Open Source. An update issued September 10, 2026, confirms that CVE-2026-71362 (CVSS 9.1) is under active exploitation in the wild.

Why it matters: Organizations running Adobe Commerce, ColdFusion, Campaign Classic, or Lightroom Classic must prioritize patching CVE-2026-71362 immediately, as this critical vulnerability is actively exploited and affects multiple product lines across different versions.

VendorsAdobe
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Adobe security advisory (AV26-808) – Update 1

Adobe released an updated security advisory on September 10, 2026 addressing vulnerabilities across multiple products including Campaign Classic, Commerce, ColdFusion, Content Credentials tools, Lightroom Classic, and Magento Open Source. CVE-2026-71362, which carries a CVSS score of 9.1, is actively exploited in the wild and appears on the known exploited vulnerabilities list.

Why it matters: Organizations running Adobe Commerce, ColdFusion, Campaign Classic, or related products must prioritize patching CVE-2026-71362 immediately due to active exploitation and critical severity; administrators should apply the available security updates referenced in advisory APSB26-92.

VendorsAdobe
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Adobe security advisory (AV26-808) – Update 1

Adobe released a security advisory on August 12, 2026, identifying vulnerabilities across multiple products including Campaign Classic, Commerce, ColdFusion, Content Credentials tools, Lightroom Classic, and Magento Open Source. An update issued on September 10, 2026, disclosed that CVE-2026-71362 (CVSS 9.1) is being actively exploited in the wild, prompting Adobe to urge users and administrators to apply available patches.

Why it matters: Organizations running Adobe Commerce, ColdFusion, Campaign Classic, or Magento instances must prioritize patching CVE-2026-71362 immediately, as this critical vulnerability is actively exploited and poses severe risk to e-commerce platforms and business applications.

VendorsAdobe
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary