CVE-2026-76196

HighCVSS 7.4

Published: 08/09/2026(UTC)Updated: 09/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control and requires user interaction with a malicious webpage. Scope is changed.

Risk Assessment

A user could fall victim to an attack, potentially leading to session hijacking and privilege escalation, resulting in access to sensitive data or resources.

Recommendation

Update Photoshop Mobile to the latest version and avoid interacting with suspicious webpages.

Other vulnerabilities in Photoshop Mobile

CVE-2026-79904Medium
Photoshop Mobile is affected by a Path Traversal vulnerability that could result in a security feature bypass. A low-privileged attacker could access unauthorized files or directories outside intended restrictions. Exploitation depends on conditions beyond the attacker's control and requires user interaction (opening a malicious file).

Original NVD description (English source)

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must interact with a malicious webpage. Scope is changed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS