Adobe Acrobat Reader Remote Code Execution Vulnerability CVE-2026-1047

CERT-Bund published a critical security advisory identifying a remote code execution vulnerability in Adobe Acrobat Reader affecting versions up to 26.001.21367. The vulnerability allows an unauthenticated remote attacker to disclose confidential information and execute arbitrary code, potentially achieving full system compromise with administrative privileges.

Organizations using Adobe Acrobat Reader on Windows, UNIX, or other platforms must prioritize immediate patching to the latest secure version. Security teams should implement defense-in-depth controls including email/web filtering for PDF attachments, network segmentation, and continuous monitoring for exploitation attempts. Failure to remediate exposes systems to remote takeover and data exfiltration risks.