CVE-2026-76196
HIGHDescription
Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must interact with a malicious webpage. Scope is changed.
Is your site exposed to CVE-2026-76196?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| adobe | photoshop_mobile |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2026-76196? +
How severe is CVE-2026-76196? +
What products are affected by CVE-2026-76196? +
How do I check if I'm vulnerable to CVE-2026-76196? +
Related Vulnerabilities
tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's …
KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with …
Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if …
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially …
An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of …
QuickCMS allows a user's session identifier to be set before authentication. The value of this session ID stays the same …