ZDI-CAN-30200
MEDIUM 6.5
Upcoming
Mar 26, 2026
Adobe
Adobe, a major software vendor known for creative and productivity tools, has a medium-severity vulnerability (CVSS 6.5) that can be exploited remotely without authentication or user interaction, potentially compromising data integrity and availability. The attack requires no special privileges and affects individual systems rather than spreading across networks, allowing attackers to modify data or cause service disruptions. Security teams should monitor for exploitation attempts and prioritize patching once Adobe releases a fix by the July 2026 deadline.
Advisory Details
Researcher
Jonathan Lein of TrendAI Research
Reported
March 26, 2026
Deadline
July 24, 2026
99d
CVSS Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L