First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-113553

HighCVSS 7.8/10Last modified Nov 11, 2026

Description

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Adobe	Audition	<= 26.5
Adobe	Audition	<= 25.6.6

References

https://www.adobe.com/trust/security/products/audition/apsb26-102.html

Timeline

Published: Nov 10, 2026
Last modified: Nov 11, 2026
NVD status: Undergoing Analysis

Related CVEs from 2026

CVE-2026-1135557.8Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use CVE-2026-1135578.6Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre CVE-2026-1135588.6Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre CVE-2026-113564.4The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_title' and 'menu_magn CVE-2026-1135607.7Audition is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current CVE-2026-1135627.7Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre CVE-2026-1135638.6Audition is affected by a Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context o CVE-2026-1135657.8Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use CVE-2026-1135677.8Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use CVE-2026-1135695.5Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker CVE-2026-113574.3The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all v CVE-2026-1135715.5Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker

CVE-2026-113553: High severity, CVSS 7.8 | Vulnix