Adobe has released security updates to address multiple vulnerabilities across its products. These updates include Adobe Photoshop, Adobe Substance 3D Designer, Adobe ColdFusion, Adobe Commerce, Adobe Magento Open Source, and other Adobe products.

Affected Systems

The following system versions are affected but not limited to:

• Adobe Photoshop: 2026 version 27.10 and earlier, 2025 version 26.11.7 and earlier for Windows and macOS

• Adobe Substance 3D Designer: version 16.0.5 and earlier for Windows and macOS

• Adobe ColdFusion: Versions 2025.0.13 and earlier, or 2023.0.25 and earlier (all platforms)

• Adobe Commerce: Versions 2.4.4‑2026‑Sep through 2.4.9‑2026‑Sep and earlier (all platforms)

• Adobe Magento Open Source: Versions 2.4.6‑2026‑sep through 2.4.9‑2026‑sep and earlier (all platforms)

Security Risks

Exploitation of the identified vulnerabilities in Adobe products may result in malicious code execution, privilege escalation, bypass of security controls, unauthorized file access or modification, and exposure of sensitive information.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

1. Upgrade to the latest supported version of the installed software as soon as possible to ensure continued access to technical support and security patches.

The recommended software versions to upgrade to are as follows, but not limited to:

• Adobe Photoshop: Upgrade to 2026 version 27.11, or 2025 version 26.11.8 (Windows and macOS)

• Adobe Substance 3D Designer: Upgrade to version 16.0.7 or above (Windows and macOS)

• Adobe ColdFusion: Upgrade to versions 2025.0.14, or 2023.0.26 or above (all platforms)

• Adobe Commerce: Upgrade to versions (2.4.4 through 2.4.9)‑2026‑Oct (stable releases), or 2.4.10‑alpha1 (alpha release) for all platforms

• Adobe Magento Open Source: Upgrade to versions (2.4.7 through 2.4.9)‑2026‑Oct (stable releases), or 2.4.10‑alpha1 (alpha release) for all platforms

2. Before performing any update tasks, ensure that you have a backup of your data.

For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009

References

• Adobe Security Bulletins and Advisories