Adobe, Veeam and Juniper Patch More Than Three Dozen Vulnerabilities
Summary
Adobe, Veeam and Juniper patched more than three dozen vulnerabilities, including critical flaws that could enable code or command execution. The companies reported no known exploitation of the covered flaws.
Key points
- Adobe patched 12 vulnerabilities in Campaign Classic, Connect, Creative Cloud and Substance 3D Painter.
- Adobe's Campaign Classic fixes include eight critical flaws involving code or command injection, incorrect authorization and cross-site scripting.
- Veeam fixed nine flaws across Backup for Microsoft 365, Backup & Replication, Veeam ONE and Veeam Agent for Linux, including critical issues involving remote code execution and authorization bypass.
- Juniper patched 18 vulnerabilities in Session Smart Router and Session Smart Conductor, including critical flaws that could allow unauthenticated command execution or privilege escalation.
- The vendors said they were not aware of the covered vulnerabilities being exploited in the wild.
- Juniper said CVE-2026-109618 affects Junos OS but is not exploitable there; its investigation found roughly a dozen other products were not vulnerable.
Article Details
- Event Type
- Security patches released for vulnerabilities across Adobe, Veeam, and Juniper Networks products.
- Impact
- The flaws include critical issues that could enable code or command execution, authorization bypass, and privilege escalation, as well as vulnerabilities with other impacts such as file access, information disclosure, and denial of service. The companies reported no known in-the-wild exploitation of the patched vulnerabilities. Juniper said CVE-2026-109618 affects Junos OS but is not exploitable.
CVE
Vendors
AdobeAdobe, Veeam, and Juniper Networks have released patches for over three dozen vulnerabilities across their products, including multiple critical-severity code execution flaws.Juniper NetworksAdobe, Veeam, and Juniper Networks have released patches for over three dozen vulnerabilities across their products, including multiple critical-severity code execution flaws.VeeamAdobe, Veeam, and Juniper Networks have released patches for over three dozen vulnerabilities across their products, including multiple critical-severity code execution flaws.
Products
Adobe Campaign ClassicThis week, Adobe fixed 12 vulnerabilities in Campaign Classic, Connect, Creative Cloud, and Substance 3D Painter.Backup & ReplicationVeeam rolled out fixes for nine security defects in Backup for Microsoft 365, Backup & Replication, Veeam ONE, and Veeam Agent for Linux.Backup for Microsoft 365Veeam rolled out fixes for nine security defects in Backup for Microsoft 365, Backup & Replication, Veeam ONE, and Veeam Agent for Linux.ConnectThis week, Adobe fixed 12 vulnerabilities in Campaign Classic, Connect, Creative Cloud, and Substance 3D Painter.Creative CloudThis week, Adobe fixed 12 vulnerabilities in Campaign Classic, Connect, Creative Cloud, and Substance 3D Painter.Junos OSIn a separate advisory covering the PHP2Shell vulnerabilities, the company noted that CVE-2026-109618 affects Junos OS, but not in an exploitable way.Session Smart ConductorJuniper Networks patched 18 vulnerabilities in Session Smart Router and Session Smart Conductor, including two critical-severity flaws leading to unauthenticated arbitrary command execution and privilege escalation.Session Smart RouterJuniper Networks patched 18 vulnerabilities in Session Smart Router and Session Smart Conductor, including two critical-severity flaws leading to unauthenticated arbitrary command execution and privilege escalation.Substance 3D PainterThis week, Adobe fixed 12 vulnerabilities in Campaign Classic, Connect, Creative Cloud, and Substance 3D Painter.Veeam Agent for LinuxVeeam rolled out fixes for nine security defects in Backup for Microsoft 365, Backup & Replication, Veeam ONE, and Veeam Agent for Linux.Veeam ONEVeeam rolled out fixes for nine security defects in Backup for Microsoft 365, Backup & Replication, Veeam ONE, and Veeam Agent for Linux.