Adobe Security Bulletin
Last updated on Nov 10, 2026
Security update available for Adobe Content Credentials SDK | APSB26-184
Summary
Adobe has released a priority 3 security update for Adobe Content Credentials SDK. This update addresses vulnerabilities rated medium and low that could result in security feature bypass, application denial-of-service, and arbitrary file system write.
Adobe is not aware of any exploits in the wild for any of the issues addressed in this update.
Affected Versions
Solution
Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version:
Vulnerability Details
Acknowledgments
Adobe would like to thank the following researchers for reporting the relevant issues and for working with Adobe to help protect our customers:
- narendra (narendra27) — CVE-2026-122097
- Abed Al Raouf Mostafa (abed1526) — CVE-2026-118484
- Adrian Siefer (adrianblackforest) — CVE-2026-113573, CVE-2026-113572, CVE-2026-123262, CVE-2026-123261, CVE-2026-122098, CVE-2026-123260, CVE-2026-123267
- elite (e0x1337) — CVE-2026-122100
- 0x0.eth (0x0doteth) — CVE-2026-113574
- scre4m3gg — CVE-2026-122101
- Geo-VIE (gvfx) — CVE-2026-122099
NOTE: Adobe maintains a public bug bounty program through Intigriti. If you’re an external security researcher interested in identifying and responsibly reporting potential security vulnerabilities to Adobe, please visit the Adobe Bug Bounty Program for more information.
For more information, visit Adobe Security Bulletin and Advisories or email PSIRT@adobe.com.
