ZDI-CAN-29549
MEDIUM 5.4
Upcoming
Mar 25, 2026
Adobe
Adobe, a leading software company known for creative and productivity applications, has a medium-severity vulnerability (CVSS 5.4) that can be exploited remotely by authenticated users without user interaction, resulting in integrity and availability impacts. The flaw requires network access and valid credentials but does not compromise confidentiality. Security teams should monitor for this vulnerability's patch release by late July 2026 and prepare deployment procedures for systems running affected Adobe products.
Advisory Details
Researcher
Jonathan Lein of TrendAI Research
Reported
March 25, 2026
Deadline
July 23, 2026
98d
CVSS Vector
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L