Alert GCSA-26080 - Adobe Security Bulletin - Maggio 2026

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

Alert ID: GCSA-26080
Data: 13 Maggio 2026
Titolo: Adobe Security Bulletin - Maggio 2026

******************************************************************

:: Descrizione del problema

Adobe ha rilasciato i seguenti aggiornamenti di sicurezza:

APSB26-46 : Security Updates Available for Adobe Premiere Pro
APSB26-47 : Security Updates Available for Adobe Media Encoder
APSB26-48 : Security Updates Available for Adobe After Effects
APSB26-49 : Security update available for Adobe Commerce
APSB26-50 : Security update available for Adobe Connect 
APSB26-51 : Security Updates Available for Adobe Illustrator
APSB26-52 : Security updates available for Substance 3D Designer
APSB26-53 : Security updates available for Content Authenticity SDK
APSB26-54 : Security updates available for Substance 3D Sampler
APSB26-55 : Security updates available for Substance 3D Painter

Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

Adobe Premiere 26.0.2 e versioni precedenti
Adobe Premiere Pro 25.6.4 e versioni precedenti
Adobe Media Encoder 25.6.4 e versioni precedenti
Adobe Media Encoder 26.0.2 e versioni precedenti
Adobe After Effects 25.6.4 e versioni precedenti
Adobe After Effects 26.0 e versioni precedenti
Adobe Commerce 2.4.9-beta1
Adobe Commerce 2.4.8-p4 e versioni precedenti
Adobe Commerce 2.4.7-p9 e versioni precedenti
Adobe Commerce 2.4.6-p14 e versioni precedenti
Adobe Commerce 2.4.5-p16 e versioni precedenti
Adobe Commerce 2.4.4-p17 e versioni precedenti
Adobe Commerce B2B 1.5.3-beta1
Adobe Commerce B2B 1.5.2-p4 e versioni precedenti
Adobe Commerce B2B 1.4.2-p9 e versioni precedenti
Adobe Commerce B2B 1.3.4-p16 e versioni precedenti
Adobe Commerce B2B 1.3.3-p17 e versioni precedenti
Magento Open Source 2.4.9-beta1
Magento Open Source 2.4.8-p4 e versioni precedenti
Magento Open Source 2.4.7-p9 e versioni precedenti
Magento Open Source 2.4.6-p14 e versioni precedenti
Adobe Connect Desktop Application 2025.9.15 (Windows) 2025.8.157 (macOS)
Illustrator 2025 29.8.6 e versioni precedenti
Illustrator 2026 30.3 e versioni precedenti
Adobe Substance 3D Designer 15.1.0 e versioni precedenti
Content Authenticity JS SDK @contentauth/c2pa-web@0.7.0
Content Authenticity Rust SDK c2pa-v0.78.2
Adobe Substance 3D Sampler 5.1.3 e versioni precedenti
Adobe Substance 3D Painter 12.0.2 e versioni precedenti


:: Impatto

Remote Code Execution
Security Restriction Bypass
Denial of Service
Cross-Site Scripting
Data Manipulation
Elevation of Privilege
Information Disclosure


:: Soluzioni

Aggiornare i software all'ultima versione:

Adobe Premiere 26.2
Adobe Premiere Pro 25.6.5
Adobe Media Encoder 25.6.5
Adobe Media Encoder 26.2
Adobe After Effects 25.6.5
Adobe After Effects 26.2
Adobe Commerce 2.4.9
Adobe Commerce 2.4.8-p5
Adobe Commerce 2.4.7-p19
Adobe Commerce 2.4.6-p15
Adobe Commerce 2.4.5-p17
Adobe Commerce 2.4.4-p18
Adobe Commerce B2B 1.5.3
Adobe Commerce B2B 1.5.2-p5
Adobe Commerce B2B 1.4.2-p10
Adobe Commerce B2B 1.3.4-p17
Adobe Commerce B2B 1.3.3-p18
Magento Open Source 2.4.9
Magento Open Source 2.4.8-p5
Magento Open Source 2.4.7-p10
Magento Open Source 2.4.6-p15
Adobe Connect Desktop Application 2025.9.15 (Windows) 2025.8.157 (macOS)
Illustrator 2025 29.8.7
Illustrator 2026 30.4
Adobe Substance 3D Designer 16.0.1
Content Authenticity JS SDK @contentauth/c2pa-web@0.7.1
Content Authenticity Rust SDK c2pa-v0.80.1
Adobe Substance 3D Sampler 6.0
Adobe Substance 3D Painter 12.0.3


:: Riferimenti

Adobe Security Bulletins e Advisories
https://helpx.adobe.com/security/security-bulletin.html
https://helpx.adobe.com/security/products/premiere_pro/apsb26-46.html
https://helpx.adobe.com/security/products/media-encoder/apsb26-47.html
https://helpx.adobe.com/security/products/after_effects/apsb26-48.html
https://helpx.adobe.com/security/products/magento/apsb26-49.html
https://helpx.adobe.com/security/products/connect/apsb26-50.html
https://helpx.adobe.com/security/products/illustrator/apsb26-51.html
https://helpx.adobe.com/security/products/substance3d_designer/apsb26-52.html
https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-53.html
https://helpx.adobe.com/security/products/substance3d-sampler/apsb26-54.html
https://helpx.adobe.com/security/products/substance3d_painter/apsb26-55.html

Mitre CVE
https://www.cvedetails.com/vulnerability-list.php?vendor_id=53&year=2026&month=05




GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCagQwbAAKCRDBnEyTZRJg
QvTzAKC+J/0DgVOWR2czxEgCuBEv6nD3KACfdOxMmFR+aRgy1gLYxbPl76wtQEQ=
=4c9+
-----END PGP SIGNATURE-----