Adobe has released security updates to address multiple vulnerabilities in its software, including Adobe Experience Manager (AEM), Adobe ColdFusion, Adobe Illustrator, and other affected products across supported platforms.

Affected Systems

The following system versions are affected, including but not limited to:

• Adobe Experience Manager (AEM): AEM Cloud Service (CS) Release 2026.5.0 and earlier, AEM 6.5 LTS Service Pack 1 and earlier, and AEM 6.5 Service Pack 24 and earlier on all platforms.

• Adobe ColdFusion 2023: Update 21 and earlier versions and Adobe ColdFusion 2025: Update 10 and earlier versions on all platforms.

• Adobe Illustrator 2025: Version 29.8.7 and earlier versions and Adobe Illustrator 2026: Version 30.5 and earlier versions for Windows and macOS.

Security Risks

The identified vulnerabilities in Adobe software, if successfully exploited, could grant an attacker control over affected systems, enabling them to execute malicious activities.  

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

1. Upgrade to the latest supported version of the installed software as soon as possible to ensure continued access to technical support and security patches.

The recommended software versions to upgrade to are as follows, but not limited to:

• Adobe Experience Manager (AEM): Upgrade to AEM Cloud Service (CS) Release 2026.6.0, AEM 6.5 LTS Service Pack 2, and AEM 6.5 Service Pack 25 on all platforms.

• Adobe ColdFusion 2023: Upgrade to Update 22, and Adobe ColdFusion 2025: Upgrade to Update 11 on all platforms.

• Adobe Illustrator 2025: Upgrade to Version 29.8.9, and Adobe Illustrator 2026: Upgrade to Version 30.6 for Windows and macOS.

2. Before performing any update tasks, ensure that you have a backup of your data.

3. Ensure that all employees within your organization understand the importance of installing security updates and keeping software up to date to reduce security risk.

For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009

References

Adobe Security Bulletins and Advisories.