Adobe published a new Photoshop security bulletin on September 8, 2026, addressing eight vulnerabilities it classifies as critical. Seven could result in arbitrary code execution, while one could allow a security feature bypass. The update applies to Photoshop on both Windows and macOS. Adobe says it is not aware of any exploits in the wild targeting the issues addressed by this release. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
For real estate photographers, this is worth acting on, but there is an important version detail that deserves more attention than the headline.
Adobe’s security bulletin lists Photoshop 2026 version 27.6 and earlier as affected and identifies 27.7 as the corrected version for that branch. It also lists Photoshop 2025 version 26.11.6 and earlier as affected, with 26.11.7 as the updated version. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Separately, Adobe’s current Photoshop documentation identifies the August 2026 desktop release as version 27.10. Source: https://helpx.adobe.com/photoshop/desktop/whats-new/whats-new-in-adobe-photoshop-on-desktop.html
That means the practical response is more precise than simply telling every photographer to “install Photoshop 27.7.”
If you are running Photoshop 2026 27.6 or earlier, update.
If you are running Photoshop 2025 26.11.6 or earlier, update.
If you are already running Photoshop 2026 27.10, Adobe’s published affected-version range does not include your installation. Do not downgrade a 27.10 workstation to 27.7 because of this bulletin.
The best first step today is simply to check your Photoshop version.
The Short Version
My recommendation for working real estate photographers is:
CHECK every computer that runs Photoshop.
UPDATE affected Photoshop 2026 installations running 27.6 or earlier.
UPDATE affected Photoshop 2025 installations running 26.11.6 or earlier.
KEEP a current 27.10 installation rather than downgrading it to 27.7.
TEST the real editing workflow after updating before sending a large property batch through it.
MONITOR Adobe’s security notices if your company manages several editing computers.
There is no reason for panic. Adobe says it is not aware of active exploitation and assigned the update Priority 3. At the same time, the vulnerabilities themselves carry Adobe’s Critical severity classification, so an affected production workstation should not simply remain unpatched indefinitely. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
What Adobe Changed on September 8
Adobe Security Bulletin APSB26-130 covers Photoshop for Windows and macOS.
Adobe lists eight critical vulnerabilities:
• Seven with a potential impact of arbitrary code execution
• One with a potential impact of security feature bypass
The highest published CVSS base score in the bulletin is 8.6. The remaining listed vulnerabilities carry scores of 7.8. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Adobe does not describe a specific public attack method in the bulletin, so I would avoid guessing about what type of image, document, download, or project file might be involved.
The useful information for photographers is much simpler:
Affected Photoshop versions should be updated.
Which Photoshop Versions Are Affected?
According to Adobe’s September 8 bulletin:
Product | Adobe’s Affected Range | Adobe’s Updated Version
Photoshop 2026 | 27.6 and earlier | 27.7
Photoshop 2025 | 26.11.6 and earlier | 26.11.7
Both Windows and macOS are included. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
There is one version-number detail that can initially look confusing.
Adobe’s regular Photoshop “What’s New” documentation currently identifies August 2026 as Photoshop version 27.10. Source: https://helpx.adobe.com/photoshop/desktop/whats-new/whats-new-in-adobe-photoshop-on-desktop.html
Since Adobe’s security bulletin defines the affected Photoshop 2026 range as 27.6 and earlier, a current 27.10 installation sits outside the published affected range.
If You Are Already on Photoshop 27.10
Leave the newer installation in place.
The security bulletin should not be interpreted as an instruction to replace Photoshop 27.10 with Photoshop 27.7.
Continue normal Creative Cloud update checks and install newer updates when Adobe makes them available.
If You Are on Photoshop 27.6 or Earlier
Adobe’s bulletin says that installation is affected.
Update through the Creative Cloud desktop application.
If You Are Still on Photoshop 2025
Check the exact version.
Adobe identifies 26.11.6 and earlier as affected and lists 26.11.7 as the corrected version. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
REPT Practical Note Version numbers matter more than the words “Photoshop 2026” in this case. Check the actual installed build before changing anything.
Why “Critical” and “Priority 3” Can Both Be True
Adobe calls the vulnerabilities Critical, yet the security bulletin has a Priority 3 rating.
Those two classifications answer different questions.
Adobe says its severity rating describes the potential security impact of a vulnerability. Adobe defines Critical vulnerabilities as issues that could allow malicious native code to execute if successfully exploited. Source: https://helpx.adobe.com/security/severity-ratings.html
Adobe’s priority rating, meanwhile, is intended to help managed environments decide how urgently an update should be deployed based partly on historical attack patterns and the likelihood of exploitation.
Adobe defines Priority 3 as an update for a product that has historically not been a target for attackers, with installation timing left to administrator discretion. Adobe separately says Priority 1 is used for vulnerabilities being actively targeted or considered at higher risk of exploitation in the wild. Source: https://helpx.adobe.com/security/severity-ratings.html
Adobe also states directly in APSB26-130 that it knows of no exploits in the wild for the vulnerabilities fixed by this update. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
The sensible interpretation is therefore:
The possible impact is serious enough to patch, while the current evidence does not support treating this as an active widespread Photoshop attack.
For a working photographer, that usually means updating at a controlled point in the production day rather than interrupting a client export halfway through.
Why This Matters to a Real Estate Photographer
Security updates can feel distant from photography.
The camera files seem more relevant.
For many real estate media companies, though, Photoshop is one of the most trusted applications in the production environment.
It may interact with:
• Lightroom
• Adobe Camera Raw
• Bridge
• Network drives
• Local SSDs
• Client project folders
• Downloaded assets
• Actions
• Plugins
• Cloud storage
• Shared editing systems
An editing workstation may also contain:
• Client names
• Property addresses
• Billing information
• Access instructions
• Contracts
• Login sessions
• Cloud-storage credentials
A Photoshop vulnerability therefore belongs in the same general operational category as a compromised browser, outdated operating system, or unsecured cloud account.
The image editor is part of the business infrastructure.
What I Would Do on a Solo Real Estate Photography Workstation
I would keep the process simple.
1. Finish the Immediate Batch
If you are ten minutes from exporting a listing for a client, finish that controlled task first.
Do not introduce a software change in the middle of a deadline unless there is evidence of an active emergency.
Adobe currently says there are no known exploits in the wild for these vulnerabilities. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
2. Save Everything
Adobe’s own Creative Cloud update instructions recommend saving work and closing applications before beginning an update. Source: https://helpx.adobe.com/creative-cloud/apps/manage-apps/creative-cloud-apps/update-creative-cloud-apps-manually.html
3. Check the Installed Photoshop Version
Do not assume that Creative Cloud updated the computer just because another Adobe application recently changed.
Verify the actual Photoshop installation.
4. Compare It With Adobe’s Affected Range
For Photoshop 2026:
27.6 or earlier → update
For Photoshop 2025:
26.11.6 or earlier → update
For a current Photoshop 2026 installation already on:
27.10 → do not downgrade
The 27.10 version is identified by Adobe as the current August 2026 desktop release and is outside the affected range published in APSB26-130. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
5. Update Through Creative Cloud
Adobe instructs users who manually manage updates to open the Creative Cloud desktop app, select Updates, and choose Update for the relevant application. Source: https://helpx.adobe.com/creative-cloud/apps/manage-apps/creative-cloud-apps/update-creative-cloud-apps-manually.html
6. Reopen Photoshop and Test the Real Workflow
Do more than confirm that Photoshop launches.
Open a normal property project.
Test the things you actually depend on.
For me, that would include:
• RAW handoff
• Layer creation
• Masks
• Actions
• Plugins
• Flash/ambient blending
• Window work
• Generative tools if used
• Save
• Export
If something important broke, I would rather find it on one test image than image 27 of a same-day listing.
Professional Tip Treat a security update like a small maintenance window. Patch the affected software, then run one representative property image through your normal workflow before returning to production volume.
What a Multi-Photographer or Editing Team Should Do
The risk becomes less obvious as the company gains computers.
The owner may be on the current version.
The staff editor may not be.
A secondary workstation might not have been opened for a month.
A contractor machine may still be several releases behind.
For a real estate media company using several editing stations, I would maintain a very small software inventory:
Workstation | Photoshop Version | Update Status | Workflow Test
Editor 1
Editor 2
Owner
Backup workstation
Adobe notes in its bulletin that organizations using managed environments can deploy Creative Cloud applications through the Admin Console. Adobe’s enterprise documentation also allows administrators to control whether users can install updates themselves or whether automatic updating is enforced. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
You do not need enterprise IT infrastructure to borrow the operating principle.
Know what version the production machines are running.
Do Not Forget the Backup Computer
Backup computers are often the machines most likely to be behind.
A workstation can sit unused for months until:
• Main computer fails
• Editor is traveling
• Another employee needs access
• A large batch needs additional capacity
Then it suddenly becomes production-critical.
If the company maintains a backup editing station, power it on periodically and keep the operating system, Photoshop, browser, security software, and critical plugins current.
A backup machine that cannot safely join production is only partially useful.
What About Lightroom?
Adobe’s September 8 bulletin is specifically for Photoshop.
The published affected-product table does not list Lightroom. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
If your entire process truly stays inside Lightroom, this particular bulletin does not identify Lightroom as affected.
Many real estate photographers use Lightroom as the first stage and then send selected files into Photoshop for:
• Flambient blending
• Window pulls
• Object cleanup
• Layer work
• Detailed masking
In that case, the Photoshop installation still matters even if Lightroom is where most of the day begins.
Should You Turn on Automatic Updates?
There are two competing realities in professional production.
Security favors staying current.
Production stability sometimes favors controlling exactly when an update occurs.
A solo photographer may be comfortable allowing Creative Cloud to update automatically.
A high-volume editing operation may prefer controlled maintenance windows so that:
• Plugins can be tested
• Actions can be checked
• Production is not interrupted
• Several workstations remain synchronized
Adobe provides both manual and administratively controlled update options. Source: https://helpx.adobe.com/creative-cloud/apps/manage-apps/creative-cloud-apps/update-creative-cloud-apps-manually.html
I care less about whether a photographer chooses automatic or controlled updates than whether the choice creates a real process.
The weak workflow is:
I update Photoshop whenever I eventually notice something changed.
Why Plugins and Actions Deserve a Quick Test
Real estate editing workflows can become highly customized.
A photographer may depend on:
• Raya Pro
• TK panels
• Custom actions
• Luminosity tools
• Noise-reduction plugins
• Batch export actions
• Retouching panels
• External editors
Most ordinary Photoshop updates will not break the complete workflow.
Occasionally, a plugin or automated step behaves differently.
That is why I would build a five-minute validation step into software maintenance.
Use one representative interior.
Run the normal process.
If everything behaves normally, return to client work.
That gives the business the security benefit without treating production software casually.
What I Would Not Do
I Would Not Ignore the Bulletin Because It Is Priority 3
Priority 3 is Adobe’s deployment-priority classification.
The vulnerabilities themselves are still classified Critical. Source: https://helpx.adobe.com/security/severity-ratings.html
I Would Not Downgrade Photoshop 27.10 to 27.7
Adobe’s current Photoshop documentation identifies 27.10 as the August 2026 release, while the security bulletin identifies 27.6 and earlier as affected. Source: https://helpx.adobe.com/photoshop/desktop/whats-new/whats-new-in-adobe-photoshop-on-desktop.html
I Would Not Install an Update in the Middle of a Critical Export Without a Reason
Finish the immediate controlled task, save everything, then perform the maintenance.
I Would Not Download a “Security Patch” From an Email or Random Website
Use Adobe’s own Creative Cloud updater and Adobe’s official security documentation.
I Would Not Assume Every Computer in the Company Is Current
Check them.
The Version Number Is the Most Important Part of This Story
Security headlines naturally become simplified.
You may see:
Critical Photoshop vulnerability — update to 27.7.
That wording can be misleading for a photographer already running 27.10.
Adobe’s two current documents need to be read together.
The security bulletin says:
Photoshop 2026 27.6 and earlier = affected
and:
27.7 = updated version listed for that branch. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Adobe’s Photoshop product documentation says:
August 2026 = version 27.10. Source: https://helpx.adobe.com/photoshop/desktop/whats-new/whats-new-in-adobe-photoshop-on-desktop.html
So the correct first question is:
Which version am I actually running?
That is the operating decision.
A Five-Minute REPT Photoshop Security Check
Before the next large editing batch:
Check
Confirm the installed Photoshop version.
Compare
Photoshop 2026 27.6 or earlier?
Update.
Photoshop 2025 26.11.6 or earlier?
Update.
Already on Photoshop 2026 27.10?
Keep the newer installation.
Save
Finish and save open client work.
Update
Use the Creative Cloud desktop application.
Test
Open one normal listing image and verify:
• Lightroom/Camera Raw handoff
• Actions
• Plugins
• Layer workflow
• Export
Continue
Return the workstation to normal production.
That is enough for most solo photographers.
REPT Recommendation
UPDATE
If your affected Photoshop installation falls within Adobe’s published vulnerable range.
CHECK
Every workstation that regularly touches client files.
KEEP
Photoshop 27.10 if that is already the current installed version. Do not interpret the bulletin’s 27.7 branch fix as a reason to downgrade a newer 27.10 system.
TEST
Your normal real estate editing workflow after any change.
MONITOR
Adobe’s security bulletins if Photoshop is business-critical.
NO GEAR OR WORKFLOW CHANGE REQUIRED
This is software maintenance. It does not require changing your camera, Lightroom workflow, editing technique, or delivery system.
Frequently Asked Questions
Did Adobe release a Photoshop security update today?
Yes. Adobe published Security Bulletin APSB26-130 on September 8, 2026, covering Photoshop on Windows and macOS. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
How serious are the vulnerabilities?
Adobe classifies all eight listed vulnerabilities as Critical. Seven are listed with a potential impact of arbitrary code execution, and one is listed as a security feature bypass. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Are hackers actively exploiting these Photoshop vulnerabilities?
Adobe says it is not aware of any exploits in the wild for the issues addressed by this update. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Which Photoshop 2026 versions are affected?
Adobe lists 27.6 and earlier as affected. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Which Photoshop 2025 versions are affected?
Adobe lists 26.11.6 and earlier as affected. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
What version does Adobe list as the security fix for Photoshop 2026?
The security bulletin lists 27.7 as the updated version for the affected 2026 branch. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Why does my Photoshop say 27.10?
Adobe’s current Photoshop “What’s New” page identifies the August 2026 desktop release as version 27.10. Source: https://helpx.adobe.com/photoshop/desktop/whats-new/whats-new-in-adobe-photoshop-on-desktop.html
Should I downgrade Photoshop 27.10 to 27.7?
No. Adobe’s security bulletin defines the affected Photoshop 2026 range as 27.6 and earlier. Photoshop 27.10 is newer and outside that published range. Keep the newer installation and continue normal Adobe update checks. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
What should I do if I am on 27.6?
Update Photoshop through the Creative Cloud desktop application. Adobe’s bulletin identifies 27.6 and earlier as affected. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
What should I do if I am on Photoshop 2025 26.11.6?
Update. Adobe lists 26.11.7 as the updated Photoshop 2025 version. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Does this affect Lightroom?
Lightroom is not listed as an affected product in APSB26-130. The bulletin addresses Photoshop. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Does it affect Mac and Windows?
Yes. Adobe lists both Windows and macOS. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Why is the update Priority 3 if the vulnerabilities are Critical?
Adobe uses separate systems for severity and deployment priority. Critical describes potential security impact. Priority 3 means the product has historically not been a target for attackers and Adobe leaves update timing to administrator discretion. Source: https://helpx.adobe.com/security/severity-ratings.html
Should I stop using Photoshop until I update?
Adobe reports no known exploitation in the wild. I would finish any immediate controlled client task, save the work, and update an affected installation at the next safe maintenance point rather than leaving it unpatched indefinitely. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
How do I update Photoshop?
Adobe instructs users to open the Creative Cloud desktop app, select Updates, and choose Update for the relevant application. Save your work and close Adobe applications first. Source: https://helpx.adobe.com/creative-cloud/apps/manage-apps/creative-cloud-apps/update-creative-cloud-apps-manually.html
Should I update every Adobe app at once?
You can, but a production photographer may prefer to change one critical application at a time and test the workflow. Adobe’s updater provides both individual Update controls and an Update All option. Source: https://helpx.adobe.com/creative-cloud/apps/manage-apps/creative-cloud-apps/update-creative-cloud-apps-manually.html
Can an update break my Photoshop actions?
Most actions may continue normally, but any production workflow can have plugin or automation dependencies. Run a representative property file through your usual process after updating.
What should a real estate media company do with several editors?
Track the Photoshop version on each workstation, update affected installations, and confirm that plugins, actions, file handoffs, and exports work before returning every machine to production. Adobe also provides centralized Creative Cloud deployment and update controls for managed environments. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Should I enable automatic updates?
That depends on your production environment. Automatic updates can reduce the chance of neglected security fixes, while controlled maintenance windows give larger teams time to validate plugins and production workflows. Adobe supports both approaches. Source: https://helpx.adobe.com/creative-cloud/apps/manage-apps/creative-cloud-apps/update-creative-cloud-apps-manually.html
Continue Your REPT Training
Software security is a small part of a dependable editing operation. The larger system still depends on good capture, repeatable file handling, efficient editing, quality control, and clean delivery.
Explore the broader Real Estate Photography Training library:
REPT Knowledge Base: https://payhip.com/RealEstatePhotographyTraining/blog/get-started-real-estate-photography
Free REPT First Listing Starter Kit
If you are preparing for an early listing assignment, spend less time chasing every software headline and more time making the basic field process dependable.
The Free REPT First Listing Starter Kit is the best next step for that stage:
Free REPT First Listing Starter Kit: https://payhip.com/b/VWSPH
Complete Real Estate Photography Training
For the deeper training path through equipment, exterior capture, interior photography, editing, and professional production:
Real Estate Photography Training Course & Products: https://payhip.com/RealEstatePhotographyTraining
Visit Real Estate Photography Training
Explore current REPT training resources and industry analysis:
Real Estate Photography Training: https://rephototraining.com
Follow Malachi on Instagram
See current real estate photography, video, editing examples, and field observations:
Malachi Gobart — Real Estate Photography
Related Articles
Continue through the REPT Knowledge Base for the connected chapters covering Photoshop editing, Lightroom workflow, file management and backup, cybersecurity and business risk, equipment and software, editing quality control, and professional production systems.
Explore the REPT Knowledge Base: https://payhip.com/RealEstatePhotographyTraining/blog/get-started-real-estate-photography
Sources
Adobe — “Security Update Available for Adobe Photoshop | APSB26-130” Published September 8, 2026. Adobe’s official security bulletin covering affected Photoshop versions, corrected versions, severity, priority, vulnerability impacts, CVEs, platforms, and current exploit status. Source: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html Adobe Security Bulletin APSB26-130: https://helpx.adobe.com/security/products/photoshop/apsb26-130.html
Adobe — “Severity Ratings” Last updated February 15, 2022; current Adobe documentation. Defines Adobe’s Priority 1–3 update system and Critical, Important, and Moderate vulnerability-severity classifications. Source: https://helpx.adobe.com/security/severity-ratings.html Adobe Security Priority and Severity Ratings: https://helpx.adobe.com/security/severity-ratings.html
Adobe — “What’s New in Adobe Photoshop on Desktop” Last updated August 28, 2026. Adobe’s current Photoshop release documentation identifying the August 2026 desktop release as version 27.10. Source: https://helpx.adobe.com/photoshop/desktop/whats-new/whats-new-in-adobe-photoshop-on-desktop.html Adobe Photoshop — What’s New on Desktop: https://helpx.adobe.com/photoshop/desktop/whats-new/whats-new-in-adobe-photoshop-on-desktop.html
Adobe — “Update Creative Cloud Apps Manually” Last updated June 16, 2026. Official Creative Cloud instructions covering saving and closing work, opening the Creative Cloud desktop application, and installing available app updates. Source: https://helpx.adobe.com/creative-cloud/apps/manage-apps/creative-cloud-apps/update-creative-cloud-apps-manually.html Adobe Creative Cloud — Update Apps Manually: https://helpx.adobe.com/creative-cloud/apps/manage-apps/creative-cloud-apps/update-creative-cloud-apps-manually.html