CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

Adobe security advisory (AV26-808)

unknown
Serial number: AV26-808 Date: August 12, 2026 As of August 11, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Campaign Classic Prior to or equal to ACC v7: 7.4.3 build 9399 Adobe Commerce Prior to or equal to 2.4.9-2026-jul, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug and 2.4.4-2026-aug Adobe Commerce B2B Prior to or equal to 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul and 1.3.3-2026-jul ColdFusion 2023 Prior to or equal to 2023.0.22 ColdFusion 2025 Prior to or equal to 2025.0.11 Content Credentials Command-Line Tool Prior to or equal to c2patool-v0.27.5 Content Credentials JS SDK Prior to or equal to @contentauth/c2pa-web@0.12.0 Content Credentials Rust SDK Prior to or equal to c2pa-v0.90.5 Lightroom Classic Prior to or equal to 15.4, 15.4.1, 15.3, 15.3.1, 15.2, 15.2.1 Magento Open Source Prior to or equal to 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul and 2.4.6-2026-jul The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Adobe Product Security Incident Response Team

CSIRTS triage

vendor: AdobeOtheraffected: Campaign Classic 7.4.3 and earlier; Commerce 2.4.9-2026-jul and earlier; B2B 1.5.3 and earlier; ColdFusion 2023.0.22 and earlier, 2025.0.11 and earlier; Content Credentials and Lightroom Classic versi
What
Multiple vulnerabilities affect multiple Adobe products and components.
Who is affected
Multiple Adobe product deployments at specified versions.
Urgency
Requires remediation; specific vulnerability classes and exploitation status are not detailed.
Action
Update affected Adobe products to versions newer than those specified in the advisory.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source
Canadian Centre for Cyber Security (CA · national-cert · site)
Severity
unknown
Published
2026-08-12
Exploitation
Not in CISA KEV at last sync

Original advisory: https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-808

More from Canadian Centre for Cyber Security