{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aadobesubstance_3d_stager/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-103849"},{"cvss":9.9,"id":"CVE-2026-103848"},{"cvss":7.8,"id":"CVE-2026-104340"},{"cvss":8.1,"id":"CVE-2026-92922"},{"cvss":7.7,"id":"CVE-2026-106634"},{"cvss":9.1,"id":"CVE-2026-92464"},{"cvss":7.8,"id":"CVE-2026-104344"},{"cvss":8.3,"id":"CVE-2026-92908"},{"cvss":8.7,"id":"CVE-2026-92911"},{"cvss":7.8,"id":"CVE-2026-103836"},{"cvss":7.8,"id":"CVE-2026-103840"},{"cvss":7.1,"id":"CVE-2026-110084"},{"cvss":7.8,"id":"CVE-2026-103837"},{"cvss":7.8,"id":"CVE-2026-103834"},{"cvss":7.8,"id":"CVE-2026-104342"},{"cvss":9.8,"id":"CVE-2026-92909"},{"cvss":9.6,"id":"CVE-2026-90531"},{"cvss":8.7,"id":"CVE-2026-95631"},{"id":"CVE-2026-100134"},{"id":"CVE-2026-104349"},{"id":"CVE-2026-48379"},{"id":"CVE-2026-104351"},{"id":"CVE-2026-104353"},{"id":"CVE-2026-105781"},{"id":"CVE-2026-100133"},{"id":"CVE-2026-91013"},{"id":"CVE-2026-105895"},{"id":"CVE-2026-106626"},{"id":"CVE-2026-106629"},{"id":"CVE-2026-106630"},{"id":"CVE-2026-48382"},{"id":"CVE-2026-48383"},{"id":"CVE-2026-75732"},{"id":"CVE-2026-83662"},{"id":"CVE-2026-90532"},{"id":"CVE-2026-103966"},{"id":"CVE-2026-103967"},{"id":"CVE-2026-104341"},{"id":"CVE-2026-106625"},{"id":"CVE-2026-92910"},{"id":"CVE-2026-103830"},{"id":"CVE-2026-103832"},{"id":"CVE-2026-103833"},{"id":"CVE-2026-103835"},{"id":"CVE-2026-103838"},{"id":"CVE-2026-103839"},{"id":"CVE-2026-103851"},{"id":"CVE-2026-110083"},{"id":"CVE-2026-104350"},{"id":"CVE-2026-104354"},{"id":"CVE-2026-105489"},{"id":"CVE-2026-105779"},{"id":"CVE-2026-105780"},{"id":"CVE-2026-48360"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":[],"_cs_severities":["high"],"_cs_tags":["roundup"],"_cs_type":"threat","_cs_vendors":["Adobe"],"content_html":"\u003cp\u003eThis roundup covers 53 Adobe security vulnerabilities. CVSS base scores range from 7.1 to 10.0. None are reported as actively exploited at the time of release. The issues affect Acrobat for Edge, Adobe Commerce, Campaign Classic, Commerce, Connect, Creative Cloud Desktop, Experience Manager, Framemaker, Substance 3D Stager, Substance3D - Stager.\u003c/p\u003e\n\u003ch2 id=\"summary\"\u003eSummary\u003c/h2\u003e\n\u003ctable\u003e\n\t\u003cthead\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003cth\u003eCVE\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eProduct\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eSeverity\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eCVSS\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eEPSS\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eKEV\u003c/th\u003e\n\t\t\t\t\t\u003cth\u003eSource\u003c/th\u003e\n\t\t\t\u003c/tr\u003e\n\t\u003c/thead\u003e\n\t\u003ctbody\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-100133\"\u003eCVE-2026-100133\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAdobe Commerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-100133\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103849\"\u003eCVE-2026-103849\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCommerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e10.0\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.84%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103849\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-91013\"\u003eCVE-2026-91013\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCommerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91013\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-92464\"\u003eCVE-2026-92464\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCommerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.87%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92464\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-92909\"\u003eCVE-2026-92909\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCommerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92909\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCritical\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e9.9\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e1.36%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103848\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105895\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106626\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106629\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106630\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-48382\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-48383\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-75732\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-83662\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-90531\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-90532\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103966\"\u003eCVE-2026-103966\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eFramemaker\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103966\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103967\"\u003eCVE-2026-103967\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eFramemaker\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103967\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-104340\"\u003eCVE-2026-104340\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eFramemaker\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.25%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104340\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-104341\"\u003eCVE-2026-104341\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eFramemaker\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104341\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-104342\"\u003eCVE-2026-104342\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eFramemaker\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.37%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104342\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-104344\"\u003eCVE-2026-104344\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eFramemaker\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.24%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104344\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-106625\"\u003eCVE-2026-106625\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eFramemaker\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106625\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-92908\"\u003eCVE-2026-92908\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAdobe Commerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.3\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.60%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92908\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-92910\"\u003eCVE-2026-92910\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCommerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92910\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-92911\"\u003eCVE-2026-92911\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAdobe Commerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.7\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.86%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92911\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-92922\"\u003eCVE-2026-92922\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAdobe Commerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e8.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.90%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92922\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-95631\"\u003eCVE-2026-95631\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCommerce\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-95631\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103830\"\u003eCVE-2026-103830\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance 3D Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103830\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103832\"\u003eCVE-2026-103832\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance 3D Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103832\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103833\"\u003eCVE-2026-103833\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance 3D Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103833\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103834\"\u003eCVE-2026-103834\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance 3D Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.14%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103834\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103835\"\u003eCVE-2026-103835\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance3D - Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103835\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103836\"\u003eCVE-2026-103836\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance 3D Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.14%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103836\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103837\"\u003eCVE-2026-103837\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance 3D Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.14%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103837\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103838\"\u003eCVE-2026-103838\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance3D - Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103838\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103839\"\u003eCVE-2026-103839\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance3D - Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103839\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103840\"\u003eCVE-2026-103840\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance 3D Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.8\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.16%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103840\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-103851\"\u003eCVE-2026-103851\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eSubstance3D - Stager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103851\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.7\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.46%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106634\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-110083\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eExperience Manager\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eHigh\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e7.1\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e0.47%\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-110084\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-100134\"\u003eCVE-2026-100134\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eAcrobat for Edge\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-100134\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-104350\"\u003eCVE-2026-104350\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCampaign Classic\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104350\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-104351\"\u003eCVE-2026-104351\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCampaign Classic\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104351\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-104353\"\u003eCVE-2026-104353\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCampaign Classic\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104353\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-104354\"\u003eCVE-2026-104354\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCampaign Classic\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104354\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-105489\"\u003eCVE-2026-105489\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCampaign Classic\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105489\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-105779\"\u003eCVE-2026-105779\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCampaign Classic\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105779\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-105780\"\u003eCVE-2026-105780\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCampaign Classic\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105780\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-105781\"\u003eCVE-2026-105781\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCampaign Classic\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105781\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-48360\"\u003eCVE-2026-48360\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eConnect\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-48360\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\t\t\u003ctr\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"#cve-2026-104349\"\u003eCVE-2026-104349\u003c/a\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eCreative Cloud Desktop\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003eno\u003c/td\u003e\n\t\t\t\t\t\u003ctd\u003e\u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104349\"\u003eNVD\u003c/a\u003e (authoritative)\u003c/td\u003e\n\t\t\t\u003c/tr\u003e\n\t\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2 id=\"cve-2026-100133\"\u003eCVE-2026-100133\u003c/h2\u003e\n\u003cp\u003eAdobe Commerce contains a stored Cross-Site Scripting (XSS) vulnerability allowing attackers to inject malicious JavaScript into form fields. When a victim accesses the affected page, the script executes within the victim's session, enabling potential account takeover or unauthorized actions due to the elevated privileges or scope changes associated with the session.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdobe Commerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-100133\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-100133\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-92908\"\u003eCVE-2026-92908\u003c/a\u003e, \u003ca href=\"#cve-2026-92911\"\u003eCVE-2026-92911\u003c/a\u003e, \u003ca href=\"#cve-2026-92922\"\u003eCVE-2026-92922\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103849\"\u003eCVE-2026-103849\u003c/h2\u003e\n\u003cp\u003eAdobe Commerce contains an improper neutralization of special elements vulnerability in its template engine, allowing a remote, unauthenticated attacker to achieve arbitrary code execution. The vulnerability permits attackers to gain elevated access or control over user sessions without requiring user interaction.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCommerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103849\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103849\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-91013\"\u003eCVE-2026-91013\u003c/a\u003e, \u003ca href=\"#cve-2026-92464\"\u003eCVE-2026-92464\u003c/a\u003e, \u003ca href=\"#cve-2026-92909\"\u003eCVE-2026-92909\u003c/a\u003e, \u003ca href=\"#cve-2026-92910\"\u003eCVE-2026-92910\u003c/a\u003e, \u003ca href=\"#cve-2026-95631\"\u003eCVE-2026-95631\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-91013\"\u003eCVE-2026-91013\u003c/h2\u003e\n\u003cp\u003eAdobe Commerce contains a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious JavaScript into form fields. When a victim accesses the affected page, the script executes in their browser, potentially leading to unauthorized account access or session hijacking.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCommerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-91013\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-91013\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103849\"\u003eCVE-2026-103849\u003c/a\u003e, \u003ca href=\"#cve-2026-92464\"\u003eCVE-2026-92464\u003c/a\u003e, \u003ca href=\"#cve-2026-92909\"\u003eCVE-2026-92909\u003c/a\u003e, \u003ca href=\"#cve-2026-92910\"\u003eCVE-2026-92910\u003c/a\u003e, \u003ca href=\"#cve-2026-95631\"\u003eCVE-2026-95631\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-92464\"\u003eCVE-2026-92464\u003c/h2\u003e\n\u003cp\u003eAdobe Commerce contains an improper input validation vulnerability that allows a high-privileged attacker to achieve arbitrary code execution. The vulnerability does not require user interaction and carries a high impact on the integrity and availability of the affected system.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCommerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92464\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-92464\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103849\"\u003eCVE-2026-103849\u003c/a\u003e, \u003ca href=\"#cve-2026-91013\"\u003eCVE-2026-91013\u003c/a\u003e, \u003ca href=\"#cve-2026-92909\"\u003eCVE-2026-92909\u003c/a\u003e, \u003ca href=\"#cve-2026-92910\"\u003eCVE-2026-92910\u003c/a\u003e, \u003ca href=\"#cve-2026-95631\"\u003eCVE-2026-95631\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-92909\"\u003eCVE-2026-92909\u003c/h2\u003e\n\u003cp\u003eCVE-2026-92909 describes an incorrect authorization vulnerability in Adobe Commerce that allows a remote, unauthenticated attacker to achieve arbitrary code execution. The flaw does not require user interaction, making it a high-severity remote code execution risk for e-commerce environments.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCommerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92909\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-92909\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103849\"\u003eCVE-2026-103849\u003c/a\u003e, \u003ca href=\"#cve-2026-91013\"\u003eCVE-2026-91013\u003c/a\u003e, \u003ca href=\"#cve-2026-92464\"\u003eCVE-2026-92464\u003c/a\u003e, \u003ca href=\"#cve-2026-92910\"\u003eCVE-2026-92910\u003c/a\u003e, \u003ca href=\"#cve-2026-95631\"\u003eCVE-2026-95631\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103848\"\u003eCVE-2026-103848\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager contains an OS command injection vulnerability, classified under CWE-78, that allows an unauthenticated or low-privileged attacker to achieve arbitrary code execution. The vulnerability does not require user interaction and impacts the scope of the affected application, posing a critical risk to environment integrity.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103848\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103848\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-105895\"\u003eCVE-2026-105895\u003c/h2\u003e\n\u003cp\u003eCVE-2026-105895 is an improper input validation vulnerability in Adobe Experience Manager that allows for unauthenticated arbitrary code execution. The vulnerability is highly critical, as it does not require user interaction and can lead to elevated access or account compromise within the context of the running application session.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105895\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-105895\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-106626\"\u003eCVE-2026-106626\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager is vulnerable to an improper input validation flaw that allows a highly privileged attacker to achieve arbitrary code execution. The vulnerability does not require user interaction and impacts the overall system security scope.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106626\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-106626\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-106629\"\u003eCVE-2026-106629\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager contains a stored cross-site scripting (XSS) vulnerability allowing remote attackers to inject malicious JavaScript into form fields. When rendered in a victim's browser, this script can execute with the context of the user session, potentially leading to unauthorized account access or session hijacking.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106629\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-106629\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-106630\"\u003eCVE-2026-106630\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager contains a stored Cross-Site Scripting (XSS) vulnerability allowing attackers to inject malicious scripts into form fields. When rendered in a victim's browser, the script executes, potentially leading to unauthorized session access or account compromise.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106630\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-106630\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-48382\"\u003eCVE-2026-48382\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager contains an incorrect authorization vulnerability that allows for remote code execution without user interaction. An unauthenticated attacker can exploit this flaw to gain unauthorized access, potentially escalating privileges within the context of the affected session.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-48382\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-48382\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-48383\"\u003eCVE-2026-48383\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager contains an incorrect authorization vulnerability that allows for unauthenticated arbitrary code execution. The vulnerability is characterized by a changed scope and high severity, potentially leading to unauthorized system access or account takeover without requiring user interaction.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-48383\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-48383\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-75732\"\u003eCVE-2026-75732\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager contains an incorrect authorization vulnerability that allows for unauthenticated, remote arbitrary code execution. Successful exploitation results in full control over the session or account with elevated privileges, impacting the integrity and availability of the system.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-75732\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-75732\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-83662\"\u003eCVE-2026-83662\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager is vulnerable to a reflected Cross-Site Scripting (XSS) attack. An attacker can exploit this by enticing a user to visit a maliciously crafted URL, allowing the injection of arbitrary scripts into the victim's session. Successful exploitation may lead to session hijacking or unauthorized actions performed on behalf of the authenticated user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-83662\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-83662\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-90531\"\u003eCVE-2026-90531\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager contains an XML External Entity (XXE) vulnerability that allows a low-privileged attacker to achieve privilege escalation and access restricted internal resources without requiring user interaction. The vulnerability significantly changes the security scope of the affected application.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-90531\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-90531\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-90532\"\u003eCVE-2026-90532\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager is vulnerable to an incorrect authorization flaw allowing unauthenticated, remote attackers to achieve arbitrary code execution. The vulnerability does not require user interaction and can lead to account or session takeover with elevated privileges.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-90532\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-90532\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103966\"\u003eCVE-2026-103966\u003c/h2\u003e\n\u003cp\u003eAdobe Framemaker contains a heap-based buffer overflow vulnerability that allows for arbitrary code execution. The vulnerability is triggered when a user opens a specially crafted, malicious file, necessitating user interaction to achieve exploitation in the context of the current user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFramemaker\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103966\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103966\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103967\"\u003eCVE-2026-103967\u003c/a\u003e, \u003ca href=\"#cve-2026-104340\"\u003eCVE-2026-104340\u003c/a\u003e, \u003ca href=\"#cve-2026-104341\"\u003eCVE-2026-104341\u003c/a\u003e, \u003ca href=\"#cve-2026-104342\"\u003eCVE-2026-104342\u003c/a\u003e, \u003ca href=\"#cve-2026-104344\"\u003eCVE-2026-104344\u003c/a\u003e, \u003ca href=\"#cve-2026-106625\"\u003eCVE-2026-106625\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103967\"\u003eCVE-2026-103967\u003c/h2\u003e\n\u003cp\u003eAdobe Framemaker contains an out-of-bounds write vulnerability that can be exploited by enticing a user to open a specially crafted malicious file. Successful exploitation allows an attacker to achieve arbitrary code execution within the security context of the current user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFramemaker\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103967\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103967\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103966\"\u003eCVE-2026-103966\u003c/a\u003e, \u003ca href=\"#cve-2026-104340\"\u003eCVE-2026-104340\u003c/a\u003e, \u003ca href=\"#cve-2026-104341\"\u003eCVE-2026-104341\u003c/a\u003e, \u003ca href=\"#cve-2026-104342\"\u003eCVE-2026-104342\u003c/a\u003e, \u003ca href=\"#cve-2026-104344\"\u003eCVE-2026-104344\u003c/a\u003e, \u003ca href=\"#cve-2026-106625\"\u003eCVE-2026-106625\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-104340\"\u003eCVE-2026-104340\u003c/h2\u003e\n\u003cp\u003eAdobe Framemaker contains a heap-based buffer overflow vulnerability that allows an attacker to achieve arbitrary code execution. The vulnerability is triggered when a user opens a specially crafted, malicious file, necessitating user interaction to execute the exploit.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFramemaker\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104340\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-104340\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103966\"\u003eCVE-2026-103966\u003c/a\u003e, \u003ca href=\"#cve-2026-103967\"\u003eCVE-2026-103967\u003c/a\u003e, \u003ca href=\"#cve-2026-104341\"\u003eCVE-2026-104341\u003c/a\u003e, \u003ca href=\"#cve-2026-104342\"\u003eCVE-2026-104342\u003c/a\u003e, \u003ca href=\"#cve-2026-104344\"\u003eCVE-2026-104344\u003c/a\u003e, \u003ca href=\"#cve-2026-106625\"\u003eCVE-2026-106625\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-104341\"\u003eCVE-2026-104341\u003c/h2\u003e\n\u003cp\u003eAdobe Framemaker contains an out-of-bounds write vulnerability that allows for arbitrary code execution. The vulnerability is triggered when a user opens a specially crafted malicious file, requiring user interaction to execute the attack.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFramemaker\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104341\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-104341\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103966\"\u003eCVE-2026-103966\u003c/a\u003e, \u003ca href=\"#cve-2026-103967\"\u003eCVE-2026-103967\u003c/a\u003e, \u003ca href=\"#cve-2026-104340\"\u003eCVE-2026-104340\u003c/a\u003e, \u003ca href=\"#cve-2026-104342\"\u003eCVE-2026-104342\u003c/a\u003e, \u003ca href=\"#cve-2026-104344\"\u003eCVE-2026-104344\u003c/a\u003e, \u003ca href=\"#cve-2026-106625\"\u003eCVE-2026-106625\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-104342\"\u003eCVE-2026-104342\u003c/h2\u003e\n\u003cp\u003eAdobe Framemaker contains a use-after-free vulnerability that can be triggered when a user opens a maliciously crafted file. Successful exploitation allows for arbitrary code execution within the context of the currently logged-in user, requiring user interaction to execute the attack.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFramemaker\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104342\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-104342\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103966\"\u003eCVE-2026-103966\u003c/a\u003e, \u003ca href=\"#cve-2026-103967\"\u003eCVE-2026-103967\u003c/a\u003e, \u003ca href=\"#cve-2026-104340\"\u003eCVE-2026-104340\u003c/a\u003e, \u003ca href=\"#cve-2026-104341\"\u003eCVE-2026-104341\u003c/a\u003e, \u003ca href=\"#cve-2026-104344\"\u003eCVE-2026-104344\u003c/a\u003e, \u003ca href=\"#cve-2026-106625\"\u003eCVE-2026-106625\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-104344\"\u003eCVE-2026-104344\u003c/h2\u003e\n\u003cp\u003eAdobe Framemaker is vulnerable to a heap-based buffer overflow that allows for arbitrary code execution. The vulnerability is triggered when a user is convinced to open a maliciously crafted file, making this primarily an exploitation vector via user interaction.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFramemaker\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104344\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-104344\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103966\"\u003eCVE-2026-103966\u003c/a\u003e, \u003ca href=\"#cve-2026-103967\"\u003eCVE-2026-103967\u003c/a\u003e, \u003ca href=\"#cve-2026-104340\"\u003eCVE-2026-104340\u003c/a\u003e, \u003ca href=\"#cve-2026-104341\"\u003eCVE-2026-104341\u003c/a\u003e, \u003ca href=\"#cve-2026-104342\"\u003eCVE-2026-104342\u003c/a\u003e, \u003ca href=\"#cve-2026-106625\"\u003eCVE-2026-106625\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-106625\"\u003eCVE-2026-106625\u003c/h2\u003e\n\u003cp\u003eAdobe Framemaker contains an out-of-bounds write vulnerability that allows for arbitrary code execution. An attacker can exploit this by enticing a user to open a specially crafted malicious file, leading to code execution in the context of the currently logged-in user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFramemaker\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106625\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-106625\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103966\"\u003eCVE-2026-103966\u003c/a\u003e, \u003ca href=\"#cve-2026-103967\"\u003eCVE-2026-103967\u003c/a\u003e, \u003ca href=\"#cve-2026-104340\"\u003eCVE-2026-104340\u003c/a\u003e, \u003ca href=\"#cve-2026-104341\"\u003eCVE-2026-104341\u003c/a\u003e, \u003ca href=\"#cve-2026-104342\"\u003eCVE-2026-104342\u003c/a\u003e, \u003ca href=\"#cve-2026-104344\"\u003eCVE-2026-104344\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-92908\"\u003eCVE-2026-92908\u003c/h2\u003e\n\u003cp\u003eAdobe Commerce contains an incorrect authorization vulnerability that allows a low-privileged attacker to bypass security features. This vulnerability grants unauthorized read and write access to the affected instance, potentially leading to limited availability disruption without requiring user interaction.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdobe Commerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92908\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-92908\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-100133\"\u003eCVE-2026-100133\u003c/a\u003e, \u003ca href=\"#cve-2026-92911\"\u003eCVE-2026-92911\u003c/a\u003e, \u003ca href=\"#cve-2026-92922\"\u003eCVE-2026-92922\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-92910\"\u003eCVE-2026-92910\u003c/h2\u003e\n\u003cp\u003eCVE-2026-92910 is an incorrect authorization vulnerability in Adobe Commerce that allows a remote, unauthenticated attacker to bypass security features. Successful exploitation results in unauthorized read and limited write access to the application, without requiring user interaction.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCommerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92910\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-92910\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103849\"\u003eCVE-2026-103849\u003c/a\u003e, \u003ca href=\"#cve-2026-91013\"\u003eCVE-2026-91013\u003c/a\u003e, \u003ca href=\"#cve-2026-92464\"\u003eCVE-2026-92464\u003c/a\u003e, \u003ca href=\"#cve-2026-92909\"\u003eCVE-2026-92909\u003c/a\u003e, \u003ca href=\"#cve-2026-95631\"\u003eCVE-2026-95631\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-92911\"\u003eCVE-2026-92911\u003c/h2\u003e\n\u003cp\u003eAdobe Commerce contains a stored Cross-Site Scripting (XSS) vulnerability that allows low-privileged attackers to inject malicious JavaScript into form fields. When viewed by a user, the script executes within the victim's browser context, potentially leading to session hijacking or unauthorized account access.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdobe Commerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92911\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-92911\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-100133\"\u003eCVE-2026-100133\u003c/a\u003e, \u003ca href=\"#cve-2026-92908\"\u003eCVE-2026-92908\u003c/a\u003e, \u003ca href=\"#cve-2026-92922\"\u003eCVE-2026-92922\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-92922\"\u003eCVE-2026-92922\u003c/h2\u003e\n\u003cp\u003eAdobe Commerce is vulnerable to a stored Cross-Site Scripting (XSS) attack. A high-privileged attacker can inject malicious scripts into form fields, which are then executed in the context of a victim's browser session. This can lead to account takeover or session hijacking.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdobe Commerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-92922\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-92922\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-100133\"\u003eCVE-2026-100133\u003c/a\u003e, \u003ca href=\"#cve-2026-92908\"\u003eCVE-2026-92908\u003c/a\u003e, \u003ca href=\"#cve-2026-92911\"\u003eCVE-2026-92911\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-95631\"\u003eCVE-2026-95631\u003c/h2\u003e\n\u003cp\u003eAdobe Commerce contains an improper input validation vulnerability that allows a high-privileged attacker to achieve arbitrary code execution. The vulnerability does not require user interaction and impacts the integrity and availability of the system through changed scope.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCommerce\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-95631\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-95631\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103849\"\u003eCVE-2026-103849\u003c/a\u003e, \u003ca href=\"#cve-2026-91013\"\u003eCVE-2026-91013\u003c/a\u003e, \u003ca href=\"#cve-2026-92464\"\u003eCVE-2026-92464\u003c/a\u003e, \u003ca href=\"#cve-2026-92909\"\u003eCVE-2026-92909\u003c/a\u003e, \u003ca href=\"#cve-2026-92910\"\u003eCVE-2026-92910\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103830\"\u003eCVE-2026-103830\u003c/h2\u003e\n\u003cp\u003eCVE-2026-103830 describes a stack-based buffer overflow vulnerability in Adobe Substance 3D Stager. An attacker can exploit this by enticing a user to open a specially crafted malicious file, leading to arbitrary code execution within the context of the currently logged-in user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance 3D Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103830\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103830\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103832\"\u003eCVE-2026-103832\u003c/a\u003e, \u003ca href=\"#cve-2026-103833\"\u003eCVE-2026-103833\u003c/a\u003e, \u003ca href=\"#cve-2026-103834\"\u003eCVE-2026-103834\u003c/a\u003e, \u003ca href=\"#cve-2026-103836\"\u003eCVE-2026-103836\u003c/a\u003e, \u003ca href=\"#cve-2026-103837\"\u003eCVE-2026-103837\u003c/a\u003e, \u003ca href=\"#cve-2026-103840\"\u003eCVE-2026-103840\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103832\"\u003eCVE-2026-103832\u003c/h2\u003e\n\u003cp\u003eCVE-2026-103832 describes an out-of-bounds write vulnerability in Adobe Substance 3D Stager. An attacker can exploit this flaw by enticing a user to open a specially crafted malicious file, which may lead to arbitrary code execution within the context of the current user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance 3D Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103832\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103832\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103830\"\u003eCVE-2026-103830\u003c/a\u003e, \u003ca href=\"#cve-2026-103833\"\u003eCVE-2026-103833\u003c/a\u003e, \u003ca href=\"#cve-2026-103834\"\u003eCVE-2026-103834\u003c/a\u003e, \u003ca href=\"#cve-2026-103836\"\u003eCVE-2026-103836\u003c/a\u003e, \u003ca href=\"#cve-2026-103837\"\u003eCVE-2026-103837\u003c/a\u003e, \u003ca href=\"#cve-2026-103840\"\u003eCVE-2026-103840\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103833\"\u003eCVE-2026-103833\u003c/h2\u003e\n\u003cp\u003eCVE-2026-103833 is an out-of-bounds write vulnerability in Adobe Substance 3D Stager. An attacker can exploit this flaw by enticing a user to open a specially crafted malicious file, which may lead to arbitrary code execution within the context of the current user session.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance 3D Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103833\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103833\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103830\"\u003eCVE-2026-103830\u003c/a\u003e, \u003ca href=\"#cve-2026-103832\"\u003eCVE-2026-103832\u003c/a\u003e, \u003ca href=\"#cve-2026-103834\"\u003eCVE-2026-103834\u003c/a\u003e, \u003ca href=\"#cve-2026-103836\"\u003eCVE-2026-103836\u003c/a\u003e, \u003ca href=\"#cve-2026-103837\"\u003eCVE-2026-103837\u003c/a\u003e, \u003ca href=\"#cve-2026-103840\"\u003eCVE-2026-103840\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103834\"\u003eCVE-2026-103834\u003c/h2\u003e\n\u003cp\u003eAdobe Substance 3D Stager is vulnerable to an out-of-bounds write flaw that can be exploited by enticing a user to open a malicious file. Successful exploitation allows an attacker to execute arbitrary code within the security context of the current user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance 3D Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103834\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103834\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103830\"\u003eCVE-2026-103830\u003c/a\u003e, \u003ca href=\"#cve-2026-103832\"\u003eCVE-2026-103832\u003c/a\u003e, \u003ca href=\"#cve-2026-103833\"\u003eCVE-2026-103833\u003c/a\u003e, \u003ca href=\"#cve-2026-103836\"\u003eCVE-2026-103836\u003c/a\u003e, \u003ca href=\"#cve-2026-103837\"\u003eCVE-2026-103837\u003c/a\u003e, \u003ca href=\"#cve-2026-103840\"\u003eCVE-2026-103840\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103835\"\u003eCVE-2026-103835\u003c/h2\u003e\n\u003cp\u003eSubstance3D - Stager contains an out-of-bounds write vulnerability that allows for arbitrary code execution if a user is tricked into opening a specially crafted malicious file. Successful exploitation occurs in the context of the current user session.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance3D - Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103835\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103835\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103838\"\u003eCVE-2026-103838\u003c/a\u003e, \u003ca href=\"#cve-2026-103839\"\u003eCVE-2026-103839\u003c/a\u003e, \u003ca href=\"#cve-2026-103851\"\u003eCVE-2026-103851\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103836\"\u003eCVE-2026-103836\u003c/h2\u003e\n\u003cp\u003eAdobe Substance 3D Stager is vulnerable to an out-of-bounds write issue triggered by opening a malicious file. Successful exploitation allows an attacker to achieve arbitrary code execution in the context of the current user, requiring user interaction.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance 3D Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103836\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103836\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103830\"\u003eCVE-2026-103830\u003c/a\u003e, \u003ca href=\"#cve-2026-103832\"\u003eCVE-2026-103832\u003c/a\u003e, \u003ca href=\"#cve-2026-103833\"\u003eCVE-2026-103833\u003c/a\u003e, \u003ca href=\"#cve-2026-103834\"\u003eCVE-2026-103834\u003c/a\u003e, \u003ca href=\"#cve-2026-103837\"\u003eCVE-2026-103837\u003c/a\u003e, \u003ca href=\"#cve-2026-103840\"\u003eCVE-2026-103840\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103837\"\u003eCVE-2026-103837\u003c/h2\u003e\n\u003cp\u003eAdobe Substance 3D Stager is vulnerable to an out-of-bounds write flaw that can be triggered when a user opens a specially crafted malicious file. Successful exploitation allows for arbitrary code execution in the context of the current user, necessitating user interaction to execute the attack.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance 3D Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103837\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103837\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103830\"\u003eCVE-2026-103830\u003c/a\u003e, \u003ca href=\"#cve-2026-103832\"\u003eCVE-2026-103832\u003c/a\u003e, \u003ca href=\"#cve-2026-103833\"\u003eCVE-2026-103833\u003c/a\u003e, \u003ca href=\"#cve-2026-103834\"\u003eCVE-2026-103834\u003c/a\u003e, \u003ca href=\"#cve-2026-103836\"\u003eCVE-2026-103836\u003c/a\u003e, \u003ca href=\"#cve-2026-103840\"\u003eCVE-2026-103840\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103838\"\u003eCVE-2026-103838\u003c/h2\u003e\n\u003cp\u003eAdobe Substance 3D Stager contains an out-of-bounds write vulnerability that can be triggered when a user opens a maliciously crafted file. Successful exploitation allows for arbitrary code execution in the context of the current user, requiring manual user interaction to execute the malicious file.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance3D - Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103838\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103838\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103835\"\u003eCVE-2026-103835\u003c/a\u003e, \u003ca href=\"#cve-2026-103839\"\u003eCVE-2026-103839\u003c/a\u003e, \u003ca href=\"#cve-2026-103851\"\u003eCVE-2026-103851\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103839\"\u003eCVE-2026-103839\u003c/h2\u003e\n\u003cp\u003eAdobe Substance3D Stager is vulnerable to an out-of-bounds write flaw that allows an attacker to achieve arbitrary code execution. Successful exploitation requires a user to open a specially crafted malicious file, leading to execution within the context of the currently logged-in user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance3D - Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103839\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103839\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103835\"\u003eCVE-2026-103835\u003c/a\u003e, \u003ca href=\"#cve-2026-103838\"\u003eCVE-2026-103838\u003c/a\u003e, \u003ca href=\"#cve-2026-103851\"\u003eCVE-2026-103851\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103840\"\u003eCVE-2026-103840\u003c/h2\u003e\n\u003cp\u003eAdobe Substance 3D Stager is vulnerable to an out-of-bounds read when parsing maliciously crafted files. An attacker can exploit this vulnerability by tricking a user into opening a malicious file, leading to potential code execution within the context of the current user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance 3D Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103840\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103840\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103830\"\u003eCVE-2026-103830\u003c/a\u003e, \u003ca href=\"#cve-2026-103832\"\u003eCVE-2026-103832\u003c/a\u003e, \u003ca href=\"#cve-2026-103833\"\u003eCVE-2026-103833\u003c/a\u003e, \u003ca href=\"#cve-2026-103834\"\u003eCVE-2026-103834\u003c/a\u003e, \u003ca href=\"#cve-2026-103836\"\u003eCVE-2026-103836\u003c/a\u003e, \u003ca href=\"#cve-2026-103837\"\u003eCVE-2026-103837\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-103851\"\u003eCVE-2026-103851\u003c/h2\u003e\n\u003cp\u003eAdobe Substance 3D Stager is vulnerable to a stack-based buffer overflow triggered by opening a specially crafted malicious file, which allows an attacker to achieve arbitrary code execution in the context of the user running the application.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSubstance3D - Stager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-103851\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-103851\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103835\"\u003eCVE-2026-103835\u003c/a\u003e, \u003ca href=\"#cve-2026-103838\"\u003eCVE-2026-103838\u003c/a\u003e, \u003ca href=\"#cve-2026-103839\"\u003eCVE-2026-103839\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-106634\"\u003eCVE-2026-106634\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager is vulnerable to a path traversal flaw (CVE-2026-106634) that allows low-privileged attackers to perform arbitrary file system writes without user interaction. The vulnerability results in a changed scope and could be leveraged by an attacker to write files to unauthorized locations on the host system.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-106634\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-106634\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-110083\"\u003eCVE-2026-110083\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager contains an SQL injection vulnerability (CVE-2026-110083) that allows a low-privileged, unauthenticated attacker to bypass security features, resulting in unauthorized read and limited write access to the application data. Exploitation is remote and does not require user interaction, making it a critical threat to the integrity of the affected content management system.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-110083\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-110083\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110084\"\u003eCVE-2026-110084\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-110084\"\u003eCVE-2026-110084\u003c/h2\u003e\n\u003cp\u003eAdobe Experience Manager is vulnerable to a Blind XPath injection, allowing a low-privileged attacker to bypass security features and gain unauthorized read/write access. The vulnerability does not require user interaction and is classified as an XML injection issue.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eExperience Manager\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-110084\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-110084\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-103848\"\u003eCVE-2026-103848\u003c/a\u003e, \u003ca href=\"#cve-2026-105895\"\u003eCVE-2026-105895\u003c/a\u003e, \u003ca href=\"#cve-2026-106626\"\u003eCVE-2026-106626\u003c/a\u003e, \u003ca href=\"#cve-2026-106629\"\u003eCVE-2026-106629\u003c/a\u003e, \u003ca href=\"#cve-2026-106630\"\u003eCVE-2026-106630\u003c/a\u003e, \u003ca href=\"#cve-2026-48382\"\u003eCVE-2026-48382\u003c/a\u003e, \u003ca href=\"#cve-2026-48383\"\u003eCVE-2026-48383\u003c/a\u003e, \u003ca href=\"#cve-2026-75732\"\u003eCVE-2026-75732\u003c/a\u003e, \u003ca href=\"#cve-2026-83662\"\u003eCVE-2026-83662\u003c/a\u003e, \u003ca href=\"#cve-2026-90531\"\u003eCVE-2026-90531\u003c/a\u003e, \u003ca href=\"#cve-2026-90532\"\u003eCVE-2026-90532\u003c/a\u003e, \u003ca href=\"#cve-2026-106634\"\u003eCVE-2026-106634\u003c/a\u003e, \u003ca href=\"#cve-2026-110083\"\u003eCVE-2026-110083\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-100134\"\u003eCVE-2026-100134\u003c/h2\u003e\n\u003cp\u003eCVE-2026-100134 is an out-of-bounds write vulnerability in Adobe's Acrobat for Edge extension. Successful exploitation allows a remote attacker to achieve arbitrary code execution in the context of the currently logged-in user by tricking a victim into opening a malicious file.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAcrobat for Edge\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-100134\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-100134\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-104350\"\u003eCVE-2026-104350\u003c/h2\u003e\n\u003cp\u003eAdobe Campaign Classic (ACC) contains a reflected Cross-Site Scripting (XSS) vulnerability. An unauthenticated attacker can execute arbitrary scripts in the context of a victim's session via a crafted URL, potentially leading to unauthorized account or session access.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCampaign Classic\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104350\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-104350\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-104351\"\u003eCVE-2026-104351\u003c/a\u003e, \u003ca href=\"#cve-2026-104353\"\u003eCVE-2026-104353\u003c/a\u003e, \u003ca href=\"#cve-2026-104354\"\u003eCVE-2026-104354\u003c/a\u003e, \u003ca href=\"#cve-2026-105489\"\u003eCVE-2026-105489\u003c/a\u003e, \u003ca href=\"#cve-2026-105779\"\u003eCVE-2026-105779\u003c/a\u003e, \u003ca href=\"#cve-2026-105780\"\u003eCVE-2026-105780\u003c/a\u003e, \u003ca href=\"#cve-2026-105781\"\u003eCVE-2026-105781\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-104351\"\u003eCVE-2026-104351\u003c/h2\u003e\n\u003cp\u003eAdobe Campaign Classic (ACC) contains a code injection vulnerability allowing low-privileged, unauthenticated attackers to execute arbitrary code. The vulnerability is a result of improper control over code generation, which can lead to remote code execution (RCE) in the context of the user running the service. The vulnerability has a CVSS v3.1 base score of 9.9 and does not require user interaction for exploitation.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCampaign Classic\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104351\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-104351\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-104350\"\u003eCVE-2026-104350\u003c/a\u003e, \u003ca href=\"#cve-2026-104353\"\u003eCVE-2026-104353\u003c/a\u003e, \u003ca href=\"#cve-2026-104354\"\u003eCVE-2026-104354\u003c/a\u003e, \u003ca href=\"#cve-2026-105489\"\u003eCVE-2026-105489\u003c/a\u003e, \u003ca href=\"#cve-2026-105779\"\u003eCVE-2026-105779\u003c/a\u003e, \u003ca href=\"#cve-2026-105780\"\u003eCVE-2026-105780\u003c/a\u003e, \u003ca href=\"#cve-2026-105781\"\u003eCVE-2026-105781\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-104353\"\u003eCVE-2026-104353\u003c/h2\u003e\n\u003cp\u003eAdobe Campaign Classic (ACC) is vulnerable to an OS command injection flaw, identified as CVE-2026-104353. A low-privileged, unauthenticated attacker can exploit this vulnerability to achieve arbitrary code execution in the context of the running application user without requiring user interaction.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCampaign Classic\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104353\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-104353\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-104350\"\u003eCVE-2026-104350\u003c/a\u003e, \u003ca href=\"#cve-2026-104351\"\u003eCVE-2026-104351\u003c/a\u003e, \u003ca href=\"#cve-2026-104354\"\u003eCVE-2026-104354\u003c/a\u003e, \u003ca href=\"#cve-2026-105489\"\u003eCVE-2026-105489\u003c/a\u003e, \u003ca href=\"#cve-2026-105779\"\u003eCVE-2026-105779\u003c/a\u003e, \u003ca href=\"#cve-2026-105780\"\u003eCVE-2026-105780\u003c/a\u003e, \u003ca href=\"#cve-2026-105781\"\u003eCVE-2026-105781\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-104354\"\u003eCVE-2026-104354\u003c/h2\u003e\n\u003cp\u003eAdobe Campaign Classic (ACC) contains an SQL injection vulnerability that allows an authenticated attacker with high privileges to execute arbitrary code. The vulnerability involves improper neutralization of special elements in SQL commands, which can lead to remote code execution under the context of the service user. No user interaction is required for successful exploitation, and the scope of the vulnerability is changed.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCampaign Classic\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104354\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-104354\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-104350\"\u003eCVE-2026-104350\u003c/a\u003e, \u003ca href=\"#cve-2026-104351\"\u003eCVE-2026-104351\u003c/a\u003e, \u003ca href=\"#cve-2026-104353\"\u003eCVE-2026-104353\u003c/a\u003e, \u003ca href=\"#cve-2026-105489\"\u003eCVE-2026-105489\u003c/a\u003e, \u003ca href=\"#cve-2026-105779\"\u003eCVE-2026-105779\u003c/a\u003e, \u003ca href=\"#cve-2026-105780\"\u003eCVE-2026-105780\u003c/a\u003e, \u003ca href=\"#cve-2026-105781\"\u003eCVE-2026-105781\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-105489\"\u003eCVE-2026-105489\u003c/h2\u003e\n\u003cp\u003eAdobe Campaign Classic is vulnerable to an SQL injection vulnerability (CVE-2026-105489) that allows a low-privileged attacker to achieve arbitrary code execution without user interaction. The vulnerability involves improper neutralization of special elements in SQL commands, potentially impacting system integrity and confidentiality.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCampaign Classic\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105489\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-105489\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-104350\"\u003eCVE-2026-104350\u003c/a\u003e, \u003ca href=\"#cve-2026-104351\"\u003eCVE-2026-104351\u003c/a\u003e, \u003ca href=\"#cve-2026-104353\"\u003eCVE-2026-104353\u003c/a\u003e, \u003ca href=\"#cve-2026-104354\"\u003eCVE-2026-104354\u003c/a\u003e, \u003ca href=\"#cve-2026-105779\"\u003eCVE-2026-105779\u003c/a\u003e, \u003ca href=\"#cve-2026-105780\"\u003eCVE-2026-105780\u003c/a\u003e, \u003ca href=\"#cve-2026-105781\"\u003eCVE-2026-105781\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-105779\"\u003eCVE-2026-105779\u003c/h2\u003e\n\u003cp\u003eAdobe Campaign Classic (ACC) is vulnerable to a SQL injection flaw that allows low-privileged attackers to bypass security controls, resulting in unauthorized read and limited write access to the application database. The vulnerability does not require user interaction and impacts the overall security scope of the affected instance.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCampaign Classic\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105779\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-105779\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-104350\"\u003eCVE-2026-104350\u003c/a\u003e, \u003ca href=\"#cve-2026-104351\"\u003eCVE-2026-104351\u003c/a\u003e, \u003ca href=\"#cve-2026-104353\"\u003eCVE-2026-104353\u003c/a\u003e, \u003ca href=\"#cve-2026-104354\"\u003eCVE-2026-104354\u003c/a\u003e, \u003ca href=\"#cve-2026-105489\"\u003eCVE-2026-105489\u003c/a\u003e, \u003ca href=\"#cve-2026-105780\"\u003eCVE-2026-105780\u003c/a\u003e, \u003ca href=\"#cve-2026-105781\"\u003eCVE-2026-105781\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-105780\"\u003eCVE-2026-105780\u003c/h2\u003e\n\u003cp\u003eAdobe Campaign Classic (ACC) contains an incorrect authorization vulnerability that allows a low-privileged attacker to achieve arbitrary code execution. The vulnerability does not require user interaction and impacts the system with a changed scope, indicating potential for significant privilege escalation or lateral movement within the application context.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCampaign Classic\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105780\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-105780\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-104350\"\u003eCVE-2026-104350\u003c/a\u003e, \u003ca href=\"#cve-2026-104351\"\u003eCVE-2026-104351\u003c/a\u003e, \u003ca href=\"#cve-2026-104353\"\u003eCVE-2026-104353\u003c/a\u003e, \u003ca href=\"#cve-2026-104354\"\u003eCVE-2026-104354\u003c/a\u003e, \u003ca href=\"#cve-2026-105489\"\u003eCVE-2026-105489\u003c/a\u003e, \u003ca href=\"#cve-2026-105779\"\u003eCVE-2026-105779\u003c/a\u003e, \u003ca href=\"#cve-2026-105781\"\u003eCVE-2026-105781\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-105781\"\u003eCVE-2026-105781\u003c/h2\u003e\n\u003cp\u003eAdobe Campaign Classic (ACC) is vulnerable to a critical SQL injection (CVE-2026-105781), allowing unauthenticated remote attackers to execute arbitrary SQL commands. Successful exploitation can lead to arbitrary code execution within the context of the current user, potentially resulting in elevated access or session compromise. The vulnerability does not require user interaction and impacts the scope of the affected application.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCampaign Classic\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-105781\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-105781\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelated in this roundup: \u003ca href=\"#cve-2026-104350\"\u003eCVE-2026-104350\u003c/a\u003e, \u003ca href=\"#cve-2026-104351\"\u003eCVE-2026-104351\u003c/a\u003e, \u003ca href=\"#cve-2026-104353\"\u003eCVE-2026-104353\u003c/a\u003e, \u003ca href=\"#cve-2026-104354\"\u003eCVE-2026-104354\u003c/a\u003e, \u003ca href=\"#cve-2026-105489\"\u003eCVE-2026-105489\u003c/a\u003e, \u003ca href=\"#cve-2026-105779\"\u003eCVE-2026-105779\u003c/a\u003e, \u003ca href=\"#cve-2026-105780\"\u003eCVE-2026-105780\u003c/a\u003e.\u003c/p\u003e\n\u003ch2 id=\"cve-2026-48360\"\u003eCVE-2026-48360\u003c/h2\u003e\n\u003cp\u003eAdobe Connect is susceptible to a code injection vulnerability triggered by user interaction, such as visiting a crafted URL or interacting with a malicious web page. Successful exploitation allows for arbitrary code execution in the context of the current user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eConnect\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-48360\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-48360\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"cve-2026-104349\"\u003eCVE-2026-104349\u003c/h2\u003e\n\u003cp\u003eAdobe Creative Cloud Desktop is vulnerable to an uncontrolled search path element issue, allowing a local, low-privileged attacker to achieve arbitrary code execution. Successful exploitation requires the user to open a malicious file, leading to execution in the context of the current user.\u003c/p\u003e\n\u003cp\u003eAffected products:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCreative Cloud Desktop\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSource: \u003ca href=\"https://nvd.nist.gov/vuln/detail/CVE-2026-104349\"\u003ehttps://nvd.nist.gov/vuln/detail/CVE-2026-104349\u003c/a\u003e\u003c/p\u003e\n","date_modified":"2026-10-27T18:04:37Z","date_published":"2026-10-13T20:38:10Z","id":"https://feed.craftedsignal.io/briefs/2026-10-adobe-security-updates/","summary":"Roundup of Adobe security advisories published in October 2026.","title":"Adobe Security Updates - October 2026","url":"https://feed.craftedsignal.io/briefs/2026-10-adobe-security-updates/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}