.

Adobe Security Bulletin

Last updated on Sep 8, 2026

Security update available for Adobe Photoshop Mobile | APSB26-136

Bulletin ID
Date published
Priority
APSB26-136
September 8, 2026
3
style
grid width 12

Summary

Adobe has released an update for Photoshop Mobile for Android. This update resolves important vulnerabilities that could result in security feature bypass and privilege escalation.

Adobe is not aware of any exploits in the wild for any of the issues addressed in this update.

Affected Versions

Product
Affected version
Platform
Photoshop Mobile
1.6.0.2299 and earlier
Android
style
grid width 12

Solution

Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the latest version via the Google Play Store.

Product
Updated versions
Platform
Priority
Photoshop Mobile
1.7.0.2302
Android
3
style
grid width 12

Vulnerability Details

Vulnerability category
Vulnerability impact
Severity
CVSS base score
CVSS vector
CVE number
Session Fixation (CWE-384)
Privilege escalation
Important
7.4
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
CVE-2026-76196
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Security feature bypass
Important
5.0
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H
CVE-2026-79904

Note

Effective August 11, 2026, Adobe may assign a single CVE identifier to internally discovered vulnerabilities with the same severity rating and CWE category when a release includes systemic fixes.

style
xl spacing, one up, grid width 12, static-links, xxl-spacing-top

Acknowledgments

Adobe would like to thank the following researcher for reporting this issue and for working with Adobe to help protect our customers:

  • yjdfy —
  • Jony (jony_juice) —

NOTE: Adobe has a public bug bounty program with HackerOne. If you are interested in working with Adobe as an external security researcher, please check out https://app.intigriti.com/programs/adobe/adobepublic/detail.

For more information, visit https://www.adobe.com/trust/security/bug-bounty.html, or email PSIRT@adobe.com.