Provenance Record

Clear, concise security brief with accurate scoping. The piece stays focused on what is confirmed: the vulnerable products, exploitation status, exploit mechanics, and remediation urgency.

All 3 listed sources were fetched and read manually. Adobe APSB26-43 confirms April 11 publication, active exploitation in the wild, affected/fixed versions, arbitrary code execution impact, and the April 12 CVSS revision from 9.6 to 8.6. BleepingComputer confirms exploitation since at least December 2025, the malicious-PDF delivery path, sandbox bypass behavior, and the cited privileged JavaScript APIs util.readFileIntoStream() and RSS.addFeed(). The Hacker News confirms the April 13, 2026 CISA KEV addition and the April 27, 2026 federal remediation deadline, and matches the bulletin revision on the attack vector change from network to local.

The core factual claims in the article align with the cited sources. The analysis section is properly framed as inference rather than sourced fact. No hallucinated quotes detected.

Approved. This is a publishable cybersecurity news submission with complete source support, sound attribution, and no material originality issues.