The Wider Adobe Patch Wave Behind CVE-2026-75650

The useful part

Behind CVE-2026-75650 CVE-2026-75650 is the entry in CERT-In's CIVN-2026-0458 that demands immediate action, but it is not the only vulnerability in the advisory. The advisory at a glance CERT-In published CIVN-2026-0458 on September 16, 2026, rating it CRITICAL. It covers multiple vulnerabilities across Adobe Experience Manager, ColdFusion, Photoshop, Illustrator, Animate, Photoshop Mobile, Adobe Commerce, Magento Open Source, Acrobat, Acrobat Reader and Campaign Classic.

How it works

• Within that set, CVE-2026-75650 is distinguished by three properties the note states directly.
• It is a critical remote code execution vulnerability exploitable by an unauthenticated remote attacker.
• The other vulnerabilities in the advisory may be equally severe in isolation, but the confirmed exploitation and the absence of an authentication requirement make this one the first item to close.
• Affected commerce versions Adobe Commerce 2.4.4-2026-aug through 2.4.9-2026-aug and earlier.

Details worth keeping

It affects Adobe Commerce, Adobe Commerce B2B and Magento Open Source. Adobe has confirmed it is being exploited in the wild. Adobe Commerce B2B 1.3.3-2026-aug through 1.5.3-2026-aug and earlier.