Adobe
CompanyFacts
- Country
- United StatesSource: Wikidata
- Founded
- 1982Source: Wikidata
- Sector
- Artificial intelligence, Information technologySource: Wikidata
- Official website
- www.adobe.comSource: Wikidata
Vulnerabilities
28 CVEs in our records, 0 known exploited (on CISA's KEV list).
Source: NVD and CISA KEVSecurity timeline
- Vulnerability reported by Qualys Threat ResearchCISA adds Brotli and Adobe Commerce PolyShell flaws to Known Exploited Vulnerabilities catalogue
Recent news
Cheap Android car head unit found loaded with bloatware and spyware-like apps
A Civic owner bought a low-cost aftermarket Android head unit from Amazon and used Claude to analyse its firmware, as might be done with a smart TV. The unit shipped with a voice assistant using WebView that reportedly consumed about a third of processing power while idle, Baidu location services, a call recorder, a DAB radio client and Adobe Acrobat. Schneier notes that this illustrates the insecurity of IoT software and that AI is lowering the barrier to reverse engineering.
CISA adds Brotli and Adobe Commerce PolyShell flaws to Known Exploited Vulnerabilities catalogue
CISA added CVE-2026-111497 (Google Brotli, CVSS 9.2) and CVE-2026-48356 (Adobe Commerce and Magento, CVSS 9.3) to its KEV catalogue, with federal agencies told to fix them by October 29, 2026. Sansec reported the Magento flaw, dubbed PolyShell, had been used to infect at least 953 online stores, while exploit traffic for the Brotli flaw has also been observed. Node.js, PHP, Bun and Microsoft .NET have released fixes for Brotli.