Adobe fixes actively exploited Acrobat Reader flaw CVE-2026-34621
2026-04-12T20:51:49Z•c3375c0a1147604795b0df8d45aa0f44f610adbccc91327596adf64194785bc6
CVE-2026-34621CVE-2026-39987acrobatreaderandroid-sdkcensyschipsoftengagelabglasswormics-scadairanian-aptlucidrookmalwaremarimonpmot-securityransomwarerockwell-plcstrapisupply-chain
What happened
SecurityAffairs roundup (Apr 10–12, 2026) reports multiple high-impact incidents: Adobe issued emergency updates for an actively exploited Acrobat Reader code-execution vulnerability CVE-2026-34621 (CVSS 8.6). The Marimo Python notebook RCE CVE-2026-39987 (CVSS 9.3) was exploited within hours of disclosure. Censys found 5,219 internet-exposed Rockwell PLCs (majority in the U.S.), matching warnings about Iran-linked APTs targeting OT/ICS. Separately, hackers claimed control of Venice’s San Marco anti-flood pumps. A critical EngageLab SDK flaw exposed private data on up to ~50M Android installs,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- c3375c0a1147604795b0df8d45aa0f44f610adbccc91327596adf64194785bc6
- Enrichment time
- 2026-04-12T20:51:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.