Adobe Security Updates – 15 April 2026

The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, obtain sensitive information, bypass security restrictions, execute arbitrary code and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Adobe ColdFusion Improper Input Validation Remote Code Execution Vulnerability (CVE-2026-27304):

• CVSS: 9.3
• Attack Vector: Adjacent
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

2. Adobe ColdFusion Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability (CVE-2026-27305):

• CVSS: 8.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Obtain Information