EudorIACyber Intelligence
Operational monitoring Newsletter IT EN
← Back to intelligence
Technical advisory

Adobe security advisory (AV26-808) – Update 2

Official source
EudorIA operational summary

What it means

Priority 40/100

Adobe ha rilasciato un advisory (AV26-808) che identifica vulnerabilità in diversi prodotti, tra cui Adobe Campaign Classic, Adobe Commerce, ColdFusion e Lightroom Classic. Le versioni interessate sono state specificate. Non è stato segnalato un sfruttamento attivo in rete. Adobe invita gli utenti a verificare le patch disponibili e a applicarle.

Why it matters

Le PMI italiane utilizzano spesso prodotti Adobe per la gestione di dati e contenuti. Le vulnerabilità potrebbero essere sfruttate per compromettere la sicurezza dei dati e delle infrastrutture. La mancanza di patch potrebbe esporre le aziende a attacchi non rilevati.

Recommended actions

  1. Applicare le patch disponibili per i prodotti Adobe interessati
  2. Verificare le versioni installate e confrontarle con quelle segnalate
  3. Ridurre l'esposizione di applicazioni Adobe non necessarie
  4. Implementare controlli di accesso rigorosi per gli utenti
  5. Eseguire backup regolari e verificare la loro integrità

Potential operational benefits

  • Riduzione della superficie esposta a potenziali attacchi
  • Miglioramento della resilienza contro le minacce
  • Riduzione del rischio di perdita di dati sensibili
Indications to confirm against the customer's technical and organisational perimeter.
Relevant controlsPatch managementSegmentazione di reteMonitoraggio / SIEMBackup & DR
AudienceITSOC
Information centre

Translation in progress

Canadian Centre for Cyber Security

The official content is available in the original language. The Italian version will be published once automated checks are complete.

Text acquired from the source

Serial number: AV26-808 Date: August 12, 2026 Updated: September 24, 2026 As of August 11, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Campaign Classic Prior to or equal to ACC v7: 7.4.3 build 9399 Adobe Commerce Prior to or equal to 2.4.9-2026-jul, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug and 2.4.4-2026-aug Adobe Commerce B2B Prior to or equal to 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul and 1.3.3-2026-jul ColdFusion 2023 Prior to or equal to 2023.0.22 ColdFusion 2025 Prior to or equal to 2025.0.11 Content Credentials Command-Line Tool Prior to or equal to c2patool-v0.27.5 Content Credentials JS SDK Prior to or equal to @contentauth/c2pa-web@0.12.0 Content Credentials Rust SDK Prior to or equal to c2pa-v0.90.5 Lightroom Classic Prior to or equal to 15.4, 15.4.1, 15.3, 15.3.1, 15.2, 15.2.1 Magento Open Source Prior to or equal to 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul and 2.4.6-2026-jul Update 1 Open-source reporting indicates that CVE-2026-71362 is being exploited in the wild. Update 2 On September 24, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-71362 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security update available for Adobe Commerce | APSB26-92 Adobe Product Security Incident Response Team CISA KEV: CVE-2026-71362

Source
Canadian Centre for Cyber Security (Canada)
Publishing entity
Canadian Centre for Cyber Security
Entity type
National CSIRT
Area
North America · CA
Original language
en · translation in preparation
Publication
24/09/2026 22:04
CVE
CVE-2026-71362
Stated country
CA
Technical scope

Affected products and versions

Verification in progress
Information not yet acquired.

The collector will check NVD and the available official vendor advisories.

Open the original source