Adobe Monthly Security Update (September 2026)

Details

Source

HKCERT Security Bulletins (HK · national-cert · site)

Severity

unknown

Published

2026-09-09

Exploitation

Observed in the wild (CISA KEV)

Original advisory: https://www.hkcert.org/security-bulletin/adobe-monthly-security-update-september-2026-_20260909

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Exploitation confirmedCVE-2026-75650Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 81% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• criticalexploited[UPDATE] [kritisch] Adobe Magento Open Source: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode …cert-bund
• highexploited[NEU] [hoch] Adobe Magento: Mehrere Schwachstellencert-bund
• unknownexploitedAdobe security advisory (AV26-888) – Update 1cccs
• highexploitedCISA Adds Four Known Exploited Vulnerabilities to Catalogcisa
• unknownexploitedNCSC-2026-0344 [1.00] [H/H] Kwetsbaarheid verholpen in Adobe Commerce en Magentoncsc-nl
• criticalexploitedCVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engi…cisa-kev
• unknownexploitedVulnérabilité dans les produits Adobe (08 septembre 2026)cert-fr-avis
• criticalexploitedCVE-2026-75650: Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Templat…nvd

More from HKCERT Security Bulletins

• unknownPalo Alto Products Multiple Vulnerabilities2026-09-10
• unknownMongoDB Multiple Vulnerabilities2026-09-10
• unknownGoogle Chrome Multiple Vulnerabilities2026-09-10
• unknownCitrix Products Multiple Vulnerabilities2026-09-10
• unknownMozilla Firefox Denial of Service Vulnerability2026-09-09