Adobe has released security updates to address vulnerabilities in Adobe products. – The affected products are Adobe Commerce, Adobe Commerce B2B, Magento Open Source, Adobe Commerce Events, and Adobe Connect.
CVE-2026-48356 is a privilege escalation vulnerability in Adobe Commerce, Adobe Commerce B2B, Magento Open Source, and Adobe Commerce Events caused by the upload of malformed files.
Affected Versions include Adobe Commerce 2.4.4-p18 and earlier, 2.4.5-p17 and earlier, 2.4.6-p15 and earlier, 2.4.7-p10 and earlier, 2.4.8-p5 and earlier, 2.4.9, Adobe Commerce B2B 1.3.3-p18 or earlier, 1.3.4-p17 or earlier, 1.4.2-p10 or earlier, 1.5.2-p5 or earlier, 1.5.3, Magento Open Source 2.4.6-p15 or earlier, 2.4.7-p10 or earlier, 2.4.8-p5 or earlier, 2.4.9, Adobe Commerce Events 1.6.0 or later, 1.20.0 or earlier.
The patched versions for this vulnerability are Adobe Commerce 2.4.4-2026-jul, 2.4.5-2026-jul, 2.4.6-2026-jul, 2.4.7-2026-jul, 2.4.8-2026-jul, 2.4.9-2026-jul, Adobe Commerce B2B 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul, Magento Open Source 2.4.6-July-2026, 2.4.7-July-2026, 2.4.8-July-2026, 2.4.9-July-2026, and Adobe Commerce Events 1.21.0.
CVE-2026-48360 is an arbitrary code execution vulnerability in Adobe Connect caused through code injection.
Affected Versions include Adobe Connect Desktop (Windows) 2026.8.51 and earlier, Adobe Connect Desktop (Mac Silicon) 2026.08.45 and earlier, Adobe Connect Desktop (Mac Intel) 2026.01.39 and earlier, and Adobe Connect Mobile 4.4 and earlier.
The patched versions for this vulnerability are Adobe Connect Desktop (Windows) 2026.9.61, Adobe Connect Desktop (Mac Silicon) 2026.10.66, Adobe Connect Desktop (Mac Intel) 2026.10.170, and Adobe Connect Mobile 4.5.
Adobe recommends updating to the latest version of the Vulnerability Patch as outlined on the reference site.
