Vai al contenuto principale

Alert GCSA-26125 - Adobe Security Bulletin - Luglio 2026


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

Alert ID: GCSA-26125
Data: 15 Luglio 2026
Titolo: Adobe Security Bulletin - Luglio 2026

******************************************************************

:: Descrizione del problema

Adobe ha rilasciato i seguenti aggiornamenti di sicurezza:

APSB26-71 : Security Updates Available for Adobe Audition
APSB26-72 : Security Updates Available for Adobe Media Encoder
APSB26-73 : Security Update Available for Adobe Commerce
APSB26-74 : Security Updates Available for Adobe Experience Manager
APSB26-76 : Security Updates Available for Adobe Premiere Pro
APSB26-77 : Security Update Available for Adobe Creative Cloud Desktop Application
APSB26-78 : Security Updates Available for Adobe After Effects
APSB26-79 : Security Updates Available for Adobe Illustrator
APSB26-80 : Security Updates Available for Content Credentials SDK
APSB26-81 : Security Updates Available for Adobe Bridge
APSB26-82 : Security Updates Available for Adobe ColdFusion
APSB26-83 : Security Updates Available for Adobe Animate

Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

Adobe Animate 2023 23.0.15 e versioni precedenti
Adobe Animate 2024 24.0.13 e versioni precedenti
Adobe Bridge 15.1.5 (LTS) e versioni precedenti
Adobe Bridge 16.0.3 e versioni precedenti
Adobe Commerce 2.4.9
Adobe Commerce 2.4.8-p5 e versioni precedenti
Adobe Commerce 2.4.7-p10 e versioni precedenti
Adobe Commerce 2.4.6-p15 e versioni precedenti
Adobe Commerce 2.4.5-p17 e versioni precedenti
Adobe Commerce 2.4.4-p18 e versioni precedenti
Adobe Commerce B2B 1.5.3
Adobe Commerce B2B 1.5.2-p5 e versioni precedenti
Adobe Commerce B2B 1.4.2-p10 e versioni precedenti
Adobe Commerce B2B 1.3.4-p17 e versioni precedenti
Adobe Commerce B2B 1.3.3-p18 e versioni precedenti
Adobe Commerce Events dalla 1.6.0 alla 1.20.0
Adobe Experience Manager (AEM) 6.5 Service Pack 24 e versioni precedenti
Adobe Experience Manager (AEM) AEM Cloud Service (CS) Release 2026.5.0 e versioni precedenti
Adobe Experience Manager (AEM) 6.5 LTS Service Pack 1 e versioni precedenti
Adobe After Effects 25.6.5 e versioni precedenti
Adobe After Effects 26.2.1 e versioni precedenti
Adobe Audition 26.0 e versioni precedenti
Adobe Audition 25.6.4 e versioni precedenti
Adobe Media Encoder 26.2.2 e versioni precedenti
Adobe Media Encoder 25.6.5 e versioni precedenti
Adobe Premiere Pro 25.6.5 e versioni precedenti
Adobe Premiere 26.2.2 e versioni precedenti
ColdFusion 2023 Update 21 e versioni precedenti
ColdFusion 2025 Update 10 e versioni precedenti
Content Credentials Command-Line Tool c2patool-v0.17.0 e versioni precedenti
Content Credentials JS SDK @contentauth/c2pa-web@0.7.0 e versioni precedenti
Content Credentials Rust SDK c2pa-v0.84.0 e versioni precedenti
Creative Cloud Desktop Application 6.9.1.1 e versioni precedenti
Illustrator 2025 29.8.7 e versioni precedenti
Illustrator 2026 30.5 e versioni precedenti
Magento Open Source 2.4.9
Magento Open Source 2.4.8-p5 e versioni precedenti
Magento Open Source 2.4.7-p10 e versioni precedenti
Magento Open Source 2.4.6-p15 e versioni precedenti


:: Impatto

Remote Code Execution
Denial of Service
Elevation of Privilege
Information Disclosure
Security Restriction Bypass
Cross-Site Scripting


:: Soluzioni

Aggiornare i software all'ultima versione:

Adobe Animate 2023 23.0.16
Adobe Animate 2024 24.0.14
Adobe Bridge 15.1.6 (LTS)
Adobe Bridge 16.0.4
Adobe Commerce 2.4.9-2026-jul
Adobe Commerce 2.4.8-2026-jul
Adobe Commerce 2.4.7-2026-jul
Adobe Commerce 2.4.6-2026-jul
Adobe Commerce 2.4.5-2026-jul
Adobe Commerce 2.4.4-2026-jul
Adobe Commerce B2B 1.5.3-2026-jul
Adobe Commerce B2B 1.5.2-2026-jul
Adobe Commerce B2B 1.4.2-2026-jul
Adobe Commerce B2B 1.3.4-2026-jul
Adobe Commerce B2B 1.3.3-2026-jul
Adobe Commerce Events 1.21.0
Adobe Experience Manager (AEM) 6.5 LTS Service Pack 2 - Hotfix for NPR-43972
Adobe Experience Manager (AEM) AEM Cloud Service (CS) Release 2026.6.0
Adobe Experience Manager (AEM) 6.5 Service Pack 25 - Hotfix for NPR-43971
Adobe After Effects 25.6.6
Adobe After Effects 26.3
Adobe Audition 26.3
Adobe Audition 25.6.6
Adobe Media Encoder 26.3
Adobe Media Encoder 25.6.6
Adobe Premiere Pro 25.6.6
Adobe Premiere 26.3
ColdFusion 2023 Update 22
ColdFusion 2025 Update 11
Content Credentials Command-Line Tool c2patool-v0.26.65
Content Credentials JS SDK @contentauth/c2pa-web@0.9.0
Content Credentials Rust SDK c2pa-v0.85.2
Creative Cloud Desktop Application 6.10.0.252.3
Illustrator 2025 29.8.9
Illustrator 2026 30.6
Magento Open Source 2.4.9-2026-jul
Magento Open Source 2.4.8-2026-jul
Magento Open Source 2.4.7-2026-jul
Magento Open Source 2.4.6-2026-jul


:: Riferimenti

Adobe Security Bulletins e Advisories
https://helpx.adobe.com/security/security-bulletin.html
https://helpx.adobe.com/security/products/audition/apsb26-71.html
https://helpx.adobe.com/security/products/media-encoder/apsb26-72.html
https://helpx.adobe.com/security/products/magento/apsb26-73.html
https://helpx.adobe.com/security/products/experience-manager/apsb26-74.html
https://helpx.adobe.com/security/products/premiere_pro/apsb26-76.html
https://helpx.adobe.com/security/products/creative-cloud/apsb26-77.html
https://helpx.adobe.com/security/products/after_effects/apsb26-78.html
https://helpx.adobe.com/security/products/illustrator/apsb26-79.html
https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html
https://helpx.adobe.com/security/products/bridge/apsb26-81.html
https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html
https://helpx.adobe.com/security/products/animate/apsb26-83.html

Mitre CVE
https://www.cvedetails.com/vulnerability-list.php?vendor_id=53&year=2026&month=07




GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iFwEAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCalh8oQAKCRDBnEyTZRJg
Qo2yAJjmeEU/N5RTvXTB6VvjAXQpIxXUAJ9XBZeboB23pe90PgQZAIUjcOw+yg==
=XVtv
-----END PGP SIGNATURE-----

 

Alert di GARR-CERT Usata per la segnalazione di allarmi di sicurezza e comunicazioni di interesse generale diretti agli enti GARR. L'iscrizione è aperta e consigliata a tutti, il posting è riservato ai membri di GARR-CERT