Adobe Security Bulletin

Last updated on Sep 8, 2026

Security update available for Adobe Photoshop Mobile | APSB26-136

Bulletin ID	Date Published	Priority
APSB26-136	September 8, 2026	3

Summary

Adobe has released an update for Photoshop Mobile for Android. This update resolves important vulnerabilities that could result in security feature bypass and privilege escalation.

Adobe is not aware of any exploits in the wild for any of the issues addressed in this update.

Affected Versions

Product	Affected version	Platform
Photoshop Mobile	1.6.0.2299 and earlier	Android

Solution

Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the latest version via the Google Play Store.

Product	Updated versions	Platform	Priority
Photoshop Mobile	1.7.0.2302	Android	3

Vulnerability Details

Vulnerability Category	Vulnerability Impact	Severity	CVSS base score	CVSS vector	CVE Number
Session Fixation (CWE-384)	Privilege escalation	Important	7.4	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N	CVE-2026-76196
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)	Security feature bypass	Important	5.0	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H	CVE-2026-79904

Note

Effective August 11, 2026, Adobe may assign a single CVE identifier to internally discovered vulnerabilities with the same severity rating and CWE category when a release includes systemic fixes.

Acknowledgments

Adobe would like to thank the following researcher for reporting this issue and for working with Adobe to help protect our customers:   

yjdfy —
Jony (jony_juice) —

For more information, visit https://helpx.adobe.com/security.html, or email PSIRT@adobe.com.

Get help faster and easier

New user?