Vulnerability · Published Sep 8, 2026 · Assigned by adobe
CVE-2026-76196Photoshop Mobile | Session Fixation (CWE-384)
High 7.4
In plain English
A high-severity session fixation in Photoshop Android from Adobe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Official description
Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must interact with a malicious webpage. Scope is changed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Photoshop Android | 0 – through 1.6.0.2294 |
| Adobe | Photoshop Android | 0 – through 1.6.0.2299 |
Weakness: CWE-384 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N