Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-123259Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-123258Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-119017Adobe Experience Manager | Incorrect Authorization (CWE-863)
- CVE-2026-118482Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2026-118481Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-118480Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-118479Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-118478Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-118197Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-114372Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-114371Adobe Experience Manager | Incorrect Authorization (CWE-863)
- CVE-2026-113580Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-113579Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-123341Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-121898Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-121896Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-121913Adobe Connect | Incorrect Authorization (CWE-863)
- CVE-2026-121908Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-121352Adobe Connect | Incorrect Authorization (CWE-863)
- CVE-2026-121912Adobe Connect | Cross-site Scripting (XSS) (CWE-79)
- CVE-2026-121887Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2026-121350Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-121349Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-121910Adobe Connect | Cross-site Scripting (XSS) (CWE-79)
- CVE-2026-121900Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-121355Adobe Connect | Incorrect Authorization (CWE-863)
- CVE-2026-121351Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-121889Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-121894Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-121356Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)