# Adobe security incidents · pwn.watch

> Security incidents tagged Adobe (vendor, product, platform or attack type).

Page: https://pwn.watch/t/adobe · generated 2026-10-22T16:23:59.585Z

## Status (as of 2026-10-22)
- Incidents: 16 (0 live, 0 live and not fully patched, 15 patched)
- Days without a Adobe security incident: 28
- Newest incident started: 2026-09-24

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/adobe.json
- RSS (every update): https://pwn.watch/t/adobe/feed.xml
- This file: https://pwn.watch/t/adobe/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability ](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362) ([json](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362.json)): high, closed, patched, started 2026-09-24, CVE-2026-71362
- [Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650) ([json](https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650.json)): high, closed, patched, started 2026-09-08, CVE-2026-75650
- [Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability](https://pwn.watch/i/adobe-coldfusion-cve-2026-48282) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2026-48282.json)): high, closed, patched, started 2026-07-07, CVE-2026-48282
- [Adobe Acrobat and Reader: Adobe Acrobat and Reader Prototype Pollution Vulnerability](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2026-34621) ([json](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2026-34621.json)): high, closed, patched, started 2026-04-13, CVE-2026-34621
- [Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability](https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236) ([json](https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236.json)): critical, closed, patched, started 2025-10-24, CVE-2025-54236
- [Adobe Experience Manager (AEM) Forms: Experience Manager Forms Code Execution Vulnerability](https://pwn.watch/i/adobe-experience-manager-aem-forms-cve-2025-54253) ([json](https://pwn.watch/i/adobe-experience-manager-aem-forms-cve-2025-54253.json)): critical, closed, patched, started 2025-10-15, CVE-2025-54253
- [Adobe ColdFusion: ColdFusion Deserialization Vulnerability](https://pwn.watch/i/adobe-coldfusion-cve-2017-3066) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2017-3066.json)): critical, closed, patched, started 2025-02-24, CVE-2017-3066
- [Adobe Flash Player: 4 actively exploited vulnerabilities](https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648) ([json](https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648.json)): high, closed, unpatched, started 2024-09-17, CVE-2013-0643, CVE-2013-0648, CVE-2014-0497…
- [Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)](https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102) ([json](https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102.json)): critical, closed, patched, started 2024-06-13, CVE-2024-34102
- [Adobe ColdFusion Improper Access Control](https://pwn.watch/i/adobe-coldfusion-cve-2024-20767) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2024-20767.json)): high, closed, patched, started 2024-03-18, CVE-2024-20767
- [Adobe ColdFusion: 2 actively exploited vulnerabilities](https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203.json)): critical, closed, patched, started 2024-01-08, CVE-2023-29300, CVE-2023-38203
- [Adobe Acrobat and Reader: Use-After-Free (CVE-2023-21608)](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-21608) ([json](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-21608.json)): high, closed, patched, started 2023-10-10, CVE-2023-21608
- [Adobe Acrobat and Reader: Out-of-Bounds Write (CVE-2023-26369)](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-26369) ([json](https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-26369.json)): high, closed, patched, started 2023-09-14, CVE-2023-26369
- [Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26359)](https://pwn.watch/i/adobe-coldfusion-cve-2023-26359) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-26359.json)): critical, closed, patched, started 2023-08-21, CVE-2023-26359
- [Adobe ColdFusion: 2 exploited vulnerabilities (CVE-2023-29298, CVE-2023-38205)](https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205.json)): high, closed, patched, started 2023-07-20, CVE-2023-29298, CVE-2023-38205
- [Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26360)](https://pwn.watch/i/adobe-coldfusion-cve-2023-26360) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-26360.json)): high, closed, patched, started 2023-03-15, CVE-2023-26360