Adobe Fixes 51 Security Vulnerabilities in Multiple Products

On August 12, 2026, Adobe resolved a total of 51 security vulnerabilities across several of its products during a Patch Day. The affected applications include ColdFusion, Commerce, Magento, Content Credentials SDK, Campaign Classic, and Lightroom Classic. Of the 51 vulnerabilities, 33 have been classified as critical, indicating a high risk for users. The security updates have been documented in five Security Bulletins.

Adobe has assigned the lowest urgency level 3 for most updates, as no attacks exploiting these vulnerabilities have been reported so far. However, ColdFusion and Campaign Classic received the highest priority level 1, while Commerce and Magento were assigned a medium priority level 2. In ColdFusion, 15 vulnerabilities were fixed, 11 of which are classified as critical. One of the vulnerabilities, identified as CVE-2026-48362, achieves the maximum CVSS score of 10.0. Adobe strongly recommends using the latest MySQL Java Connector to further enhance security.

For Campaign Classic, three vulnerabilities were closed, two of which also reach the maximum CVSS score of 10.0. This software had a similar risk profile in June, which is considered a rare and concerning situation. The third vulnerability in this application has a CVSS score of 9.0. The online shopping solution Commerce, based on the open-source Magento software, received updates against 7 security vulnerabilities, five of which were classified as critical.

Adobe has changed the naming scheme for Commerce and Magento since July, so the update identifiers now include the year and month of release. For the Content Credentials SDK, Adobe provides updates against a total of 15 vulnerabilities, three of which are classified as critical. In Lightroom Classic, 11 security vulnerabilities were closed, all of which are classified as critical. These comprehensive security measures aim to protect users from potential attacks. Adobe has altered its update strategy and will now implement two update dates per month, occurring on the second and fourth Tuesday.

This measure is intended to ensure that users are regularly provided with the latest security updates and that their systems remain protected. The latest security updates are available on Adobe's official website. Users are encouraged to regularly update their software to minimize security risks and ensure the integrity of their systems. According to Adobe, the vulnerability CVE-2026-48362 affects all supported versions of ColdFusion.