AdobeCVE-2026-84395
Adobe Premiere: server-side request forgery
High7.1CVE-2026-84395 · Published Sep 22, 2026 · updated Sep 23, 2026
Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Premiere Product | <= 26.3.2 | No fix yet |
| <= 25.6.5 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-918
More Adobe advisories
All Adobe| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 22 | Adobe Content Credentials: integer overflow | Medium5.5 | No fix yet |
| Sep 22 | Adobe Substance3D - Modeler: out-of-bounds write | High7.8 | No fix yet |
| Sep 22 | Adobe Connect: improper certificate validation | Medium6.2 | No fix yet |
| Sep 22 | Adobe InDesign Desktop: null pointer dereference | Medium5.5 | No fix yet |
| Sep 22 | Adobe Substance3D - Modeler: out-of-bounds write | High7.8 | No fix yet |
| Sep 22 | Adobe AEM 6.5: server-side request forgery | High8.7 | No fix yet |