Adobe Security Updates — April 2026
Tuesday, 14 April 2026
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 6
- Critical 9.6
- Critical 9.3
- Critical 9.3
- Critical 9.3
- Critical 9.3 EPSS 3.6%
- Critical 9.3
All vulnerabilities 53
Critical6 ShowHide
- Critical 9.6
- Critical 9.3
- Critical 9.3
- Critical 9.3
- Critical 9.3 EPSS 3.6%
- Critical 9.3
High31 ShowHide
- High 8.7
- High 8.6
-
High 8.6
CVE-2026-27305 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 26%
- High 8.6
- High 8.6
- High 8.4
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
-
High 7.7
CVE-2026-34619 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 7.6%
- High 7.5
Medium14 ShowHide
- Medium 6.3
- Medium 6.3
- Medium 6.1
- Medium 6.1
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
Low2 ShowHide
- Low 2.4 EPSS 2.7%
- Low 2.4 EPSS 2.5%