Bug Bounties
Adobe Public

Adobe Public

Top 100 site
www.intigriti.com →
Bounty USD $75 - $15,000

Program Details

Handle
adobepublic

In-Scope Domains

  • account.adobe.com
  • account.magento.com
  • acrobat.adobe.com
  • adobeid-na1.services.adobe.com
  • auth.services.adobe.com
  • commercemarketplace.adobe.com
  • federatedid-na1.services.adobe.com
  • firefly.adobe.com
  • fonts.adobe.com
  • ims-na1.adobelogin.com
  • learningmanagerstage4.adobe.com
  • lightroom.adobe.com
  • magento.com
  • net.s2stagehance.com
  • new.express.adobe.com
  • photoshop.adobe.com
  • portfolio.ccpsx.com
  • repo.magento.com
  • stock.adobe.com

Known Exploited Vulnerabilities 82CVEs

11 linked to ransomware campaigns

  • CVE-2026-71362Commerce and Magento Sep 24, 202687.5% EPSS

    Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.

  • CVE-2026-75650Commerce and MagentoSep 8, 20263.9% EPSS

    Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.

  • CVE-2026-48282ColdFusionJul 7, 202642.4% EPSS

    Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.

  • CVE-2009-3459Acrobat and ReaderMay 20, 202686.6% EPSS

    Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption.

  • CVE-2020-9715AcrobatApr 13, 202633.5% EPSS

    Adobe Acrobat contains a use-after-free vulnerability that allows for code execution

  • CVE-2026-34621Acrobat and ReaderApr 13, 20262.2% EPSS

    Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.

  • CVE-2025-54236Commerce and MagentoOct 24, 202594.7% EPSS

    Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.

  • CVE-2025-54253Experience Manager (AEM) FormsOct 15, 202588.3% EPSS

    Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.

  • CVE-2017-3066ColdFusionFeb 24, 202590.6% EPSS

    Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.

  • CVE-2024-20767ColdFusionDec 16, 202498.5% EPSS

    Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel.

and 72 more - view full CISA catalog →

security.txt

Contact
https://app.intigriti.com/programs/adobe/adobepublic/detail, [email protected]
Encryption
https://helpx.adobe.com/security/key.html
Policy
https://helpx.adobe.com/security.html/security/policy.ug.html
Hiring
https://www.adobe.com/careers.html
Acknowledgments
https://helpx.adobe.com/security.html
Languages
en, ro, hi
Expires
Jul 30, 2027
View raw security.txt →