Adobe CVEs
Every Adobe vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.
11 CVEs
EPSSCoverage
10.0CVSS 3.1
CVE-2026-103849
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Commerce
EPSS
1.2%
1 story
4 weeks ago
9.1CVSS 3.1
CVE-2026-71362
Exploited
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Commerce and Magento
EPSS
92%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-48282
Exploited
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion
EPSS
42%
2 stories
4 months ago
10.0CVSS 3.1
CVE-2026-48276
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Adobe · ColdFusion 2025
EPSS
1.3%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48277
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.3%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48281
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.4%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48286
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Adobe · Campaign Classic
EPSS
1.2%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48316
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.1%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48283
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Adobe · ColdFusion 2025
EPSS
1.3%
1 story
4 months ago
9.3CVSS 3.1
CVE-2026-48313
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion 2025
EPSS
3.0%
1 story
4 months ago
9.3CVSS 3.1
CVE-2026-48315
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.0%
1 story
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.