Adobe Security Updates — August 2026
Tuesday, 11 August 2026
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
- Critical 9.1 EPSS 92%
Critical 5
- Critical 10.0 EPSS 1.2%
-
Critical 10.0
CVE-2026-48362 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)EPSS 3.5%
- Critical 10.0 EPSS 1.2%
- Critical 9.6
- Critical 9.0
All vulnerabilities 52
Critical6 ShowHide
- Critical 9.1 EPSS 92%
- Critical 10.0 EPSS 1.2%
-
Critical 10.0
CVE-2026-48362 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)EPSS 3.5%
- Critical 10.0 EPSS 1.2%
- Critical 9.6
- Critical 9.0
High28 ShowHide
- High 8.8
- High 8.8
- High 8.7
- High 8.7
- High 8.6
- High 8.6
- High 8.4
- High 8.2
- High 8.1 EPSS 1.3%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
-
High 7.7
CVE-2026-48385 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)EPSS 1.6%
- High 7.7
- High 7.7
- High 7.6
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.3
- High 7.1
Medium17 ShowHide
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 4.9 EPSS 1%
- Medium 4.7
- Medium 4.6
- Medium 4.0
Low1 ShowHide
- Low 2.7