Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.

Critical CVSS 9.8

CVECVE-2019-7106

First seen2026-09-15 16:15 UTC

Disclosed2019-05-23 16:29 UTC

Last updated2026-09-15 16:15 UTC

Channel statusauto

Summary

Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).