grep -rl "CVE-2026-48356" ./articles
CVE-2026-48356 went on the catalogue on 27 October, due 10 November. Adobe shipped the backport on 14 July with a line saying it was not aware of any exploits. Sansec had been logging mass attacks since March.
Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.
CISA added this identifier to its Known Exploited Vulnerabilities catalog on 2026-10-27, which means the agency has evidence of exploitation rather than a judgement that exploitation is possible. US federal agencies were required to remediate it by 2026-11-10.
CVE-2026-48356 went on the catalogue on 27 October, due 10 November. Adobe shipped the backport on 14 July with a line saying it was not aware of any exploits. Sansec had been logging mass attacks since March.
../cve — every identifier we have covered