Adobe patched two critical AEM flaws enabling code execution and file access without user interaction CISA added CVE-2025-54253 and CVE-2025-54254 to KEV, confirming active exploitation Agencies must ...