Adobe security advisory (AV26-1039)
Canada’s Cyber Centre urges updates for vulnerabilities across many Adobe products, including ColdFusion and Commerce.
The Canadian Centre for Cyber Security issued advisory AV26-1039 on October 14, 2026, noting vulnerabilities affecting numerous Adobe products as of October 13. Listed products include Adobe Bridge, ColdFusion 2025 and 2023, Commerce and Commerce B2B, Experience Manager, FrameMaker, Photoshop, Substance 3D applications, and Magento Open Source, with specific version ceilings given for several titles. The centre urges administrators to review Adobe’s security bulletins and apply necessary updates. No CVE identifiers or active exploitation are stated.
- Advisory AV26-1039, dated October 14, 2026, summarizes Adobe product vulnerabilities.
- Affected lines include ColdFusion, Commerce, Experience Manager, Photoshop, and FrameMaker.
- The Cyber Centre tells users to review Adobe’s bulletins and apply available updates.
Full article176 words · extracted from cyber.gc.ca · click to collapse
Serial number: AV26-1039
Date: October 14, 2026
As of October 13, 2026, Adobe is affected by vulnerabilities in the following products:
- Adobe Bridge
- Prior to or equal to 16.0.7
- Adobe Bridge (LTS)
- Prior to or equal to 15.1.8
- Adobe ColdFusion 2025
- Version 2025.0.13
- Adobe ColdFusion 2023
- Version 2023.0.25
- Adobe Commerce
- Multiple versions
- Adobe Commerce B2B
- Multiple versions
- Adobe Credentials SDK
- Multiple versions
- Adobe Dimension
- Prior to or equal to 4.1.8
- Adobe Experience Manager
- Multiple versions
- Adobe FrameMaker 2022
- Prior to or equal to 17.0.9.866
- Adobe FrameMaker 2026
- Prior to or equal to 18.0.0.206
- Adobe Photoshop 2026
- Prior to or equal to 27.10
- Adobe Photoshop 2025
- Prior to or equal to 26.11.7
- Adobe Substance 3D Designer
- Prior to or equal to 16.05
- Adobe Substance 3D Sampler
- Prior to or equal to 6.0.3
- Adobe Substance 3D Stager
- Prior to or equal to 3.1.8
- Magento Open Source
- Multiple versions
The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.
Text extracted automatically; images, tables and formatting may be missing. Original: https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-1039