CVE-2026-76191: Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context…

PriorityP342high8.2CVSS 3.1

AVLACLPRLUIRSCCHIHAH

EPSS

0.24%

14.5th percentile

Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
adobe	adobe_animate_2023	<= 23.0.16	—
adobe	adobe_animate_2024	<= 24.0.14	—
adobe	animate	>= 23.0.0 < 23.0.17	23.0.17
adobe	animate	>= 24.0.0 < 24.0.14	24.0.14

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.