Adobe security advisory (AV26-808) – Update 1
Canada's Cyber Centre updated Adobe advisory AV26-808 to flag that CVE-2026-71362 in Adobe Commerce is being exploited in the wild.
The Canadian Centre for Cyber Security advisory AV26-808 (Update 1) lists vulnerabilities affecting Adobe products including Campaign Classic, Adobe Commerce, Magento Open Source, ColdFusion 2023/2025, Lightroom Classic, and Content Credentials SDKs. Update 1 notes that open-source reporting indicates CVE-2026-71362 is being exploited in the wild. Users and administrators are urged to review the referenced links and apply updates, including those in Adobe bulletin APSB26-92 for Adobe Commerce.
- CVE-2026-71362 is being exploited in the wild, per open-source reporting
- Affected products include Adobe Commerce, Magento Open Source, ColdFusion, Lightroom Classic, and Campaign Classic
- Commerce updates are tracked under Adobe security bulletin APSB26-92
- Canadian Cyber Centre urges administrators to apply the available patches
- CVEs
- CVE-2026-71362
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-71362 | Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento) | 9.1 | 90% | KEVPoC | KEV |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-808 Date: August 12, 2026 Updated: September 10, 2026 As of August 11, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Campaign Classic Prior to or equal to ACC v7: 7. 4. 3 build 9399 Adobe Commerce Prior to or equal to 2.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.