Alert GCSA-26208 - Adobe Security Bulletin - settembre 2026

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26208 data: 9 settembre 2026 titolo: Adobe Security Bulletin - settembre 2026 ****************************************************************** :: Descrizione del problema Adobe ha rilasciato i seguenti aggiornamenti di sicurezza con i quali risolve oltre 170 vulnerabilita'. APSB26-98 Security updates available for Adobe Experience Manager APSB26-119 Security updates available for Adobe ColdFusion APSB26-130 Security update available for Adobe Photoshop APSB26-131 Security Updates Available for Adobe Illustrator APSB26-132 Security updates available for Adobe Animate APSB26-136 Security update available for Adobe Photoshop Mobile APSB26-138 Security update available for Adobe Commerce APSB26-141 Security update available for Adobe Acrobat Reader APSB26-142 Security update available for Adobe Campaign Classic APSB26-146 Security update available for Adobe Commerce La vulnerabilita' CVE-2026-75650 (CVSS v3.1 score 10.0) e' attualmente oggetto di sfruttamento. Si tratta di una vulnerabilita' di tipo RCE presente in Adobe Commerce, Adobe Commerce B2B e Magento Open Source. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Adobe Experience Manager (AEM) Adobe ColdFusion Adobe Photoshop Adobe Illustrator Adobe Animate Adobe Photoshop Mobile Adobe Commerce Adobe Acrobat Reader Adobe Campaign Classic :: Impatto Esecuzione remota di codice arbitrario (RCE) Rivelazione di informazioni (ID) Denial of Service (DoS) Acquisizione di privilegi piu' elevati (EoP) Bypass delle funzionalita' di sicurezza (SFB) Cross-site Scripting (XSS) Attacco all'integrita' dei dati (Data Manipulation) :: Soluzioni Aggiornare i prodotti alle versioni piu' recenti. Adobe Experience Manager (AEM) AEM Cloud Service (CS) Release 2026.8.0 Adobe Experience Manager (AEM) 6.5 LTS Service Pack 3 Adobe Experience Manager (AEM) 6.5 Service Pack 25 ColdFusion 2025 2025.0.13 ColdFusion 2023 2023.0.24 Photoshop 2026 27.7 Photoshop 2025 26.11.7 Illustrator 2025 29.8.11 Illustrator 2026 30.8 Adobe Animate 2023 23.0.17 Adobe Animate 2024 24.0.15 Photoshop Mobile 1.7.0.2302 Adobe Commerce 2.4.9-2026-sep 2.4.8-2026-sep 2.4.7-2026-sep 2.4.6-2026-sep 2.4.5-2026-sep 2.4.4-2026-sep Adobe Commerce B2B 1.5.3-2026-sep 1.5.2-2026-sep 1.4.2-2026-sep 1.3.4-2026-sep 1.3.3-2026-sep Magento Open Source 2.4.9-2026-sep 2.4.8-2026-sep 2.4.7-2026-sep Adobe Commerce e Magento Open Source applicare Hotfix per CVE-2026-75650 Adobe Acrobat Continuous 26.002.21901 Acrobat Reader Continuous 26.002.21901 Acrobat 2024 Classic 2024 24.001.30429 Adobe Campaign Classic ACC v7 7.4.4 build 9402 :: Riferimenti Adobe Security Bulletins e Advisories https://helpx.adobe.com/security.html/security/security-bulletin.html https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html https://helpx.adobe.com/security/products/photoshop/apsb26-130.html https://helpx.adobe.com/security/products/illustrator/apsb26-131.html https://helpx.adobe.com/security/products/animate/apsb26-132.html https://helpx.adobe.com/security/products/photoshop/apsb26-136.html https://helpx.adobe.com/security/products/magento/apsb26-138.html https://helpx.adobe.com/security/products/acrobat/apsb26-141.html https://helpx.adobe.com/security/products/campaign/apsb26-142.html https://helpx.adobe.com/security/products/magento/apsb26-146.html https://experienceleague.adobe.com/en/docs/commerce-knowledge-base/kb/announcements/commerce-apsb26-146 SecurityWeek https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/ https://www.securityweek.com/adobe-commerce-zero-day-exploited-to-backdoor-online-stores/ Mitre CVE I riferimenti CVE sono disponibili nell'advisory originale. GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaqEfsgAKCRDBnEyTZRJg Qn1sAKDYSsTIqXv7A2evAi5O0/TzP6IQMACfVo4Bc9SJonHutxc1boEY28N8LSs= =Rbaw -----END PGP SIGNATURE-----