ZDI-CAN-29550 HIGH 7.5 Upcoming Mar 20, 2026

Adobe

Adobe, a major software company known for creative and document processing applications, has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely without authentication or user interaction, resulting in unauthorized information disclosure. The flaw requires no special access privileges and affects the confidentiality of data, though it does not enable system modifications or denial of service. Security teams should monitor for patches arriving before the July 2026 deadline and prioritize updates for Adobe products in their environments, as this vulnerability poses a significant risk for data theft if exploited in the wild.

Advisory Details
Researcher Jonathan Lein of TrendAI Research
Reported March 20, 2026
Deadline July 18, 2026 93d
CVSS Vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy