CVE-2026-76196

Analyzed Analyzed - Analysis Complete

Session Fixation in Photoshop Mobile

Publication date: 2026-09-08

Last updated on: 2026-09-09

Assigner: Adobe Systems Incorporated

Description

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must interact with a malicious webpage. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-76196

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	photoshop_mobile	to 1.7.0.2302 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-384	Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

Attack-Flow Graph

Executive Summary

Photoshop Mobile has a Session Fixation vulnerability that allows an attacker to hijack a user's session. This could lead to privilege escalation, letting the attacker access sensitive resources. Exploitation requires the victim to interact with a malicious webpage.

Detection Guidance

Detection of this vulnerability requires monitoring for unusual session activity or privilege escalation events in Photoshop Mobile. Check for unexpected changes in user permissions or access to sensitive resources. Review web browsing history for interactions with untrusted or malicious webpages.

Impact Analysis

If exploited, an attacker could gain unauthorized access to your Photoshop Mobile session, potentially stealing sensitive data or performing actions on your behalf. This requires tricking you into visiting a malicious webpage.

Mitigation Strategies

Update Photoshop Mobile to the latest version as soon as patches are available. Avoid interacting with untrusted or suspicious webpages. Implement network monitoring to detect unusual session activity. Restrict access to sensitive resources until the issue is resolved.

Hi! I’m here to help you understand CVE-2026-76196. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70