Adobe, Veeam and Juniper patch critical code-execution flaws
Original title: Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
None of the vendors reports exploitation; fixes cover cross-tenant code execution in Veeam and unauthenticated command execution in Session Smart.
Adobe, Veeam and Juniper Networks released fixes for more than three dozen vulnerabilities, including multiple critical code-execution bugs. Adobe’s Campaign Classic update addresses eight critical issues, and Connect received a critical arbitrary-code-execution fix. Veeam patched a critical cross-tenant configuration read/write and remote-code-execution flaw in Backup for Microsoft 365, plus an unauthenticated authorization bypass in Backup & Replication. Juniper fixed 18 flaws in Session Smart Router and Conductor, two critical. All three say they know of no in-the-wild exploitation.
- Adobe fixed 12 bugs in Campaign Classic, Connect, Creative Cloud and Substance 3D Painter.
- Veeam issued nine fixes, including REST API and multi-factor authentication bypasses.
- Juniper says CVE-2026-109618 affects Junos OS but is not exploitable there.
- Juniper checked about a dozen other products and found none vulnerable to PHP2Shell.
Impact: Code execution, privilege escalation or authorization bypass
| Product | Affected |
|---|---|
| Adobe Campaign Classic | — |
| Adobe Connect | — |
| Adobe Creative Cloud | — |
| Adobe Substance 3D Painter | — |
| Veeam Backup for Microsoft 365 | — |
| Veeam Backup & Replication | — |
| Veeam ONE | — |
| Veeam Agent for Linux | — |
| Juniper Networks Session Smart Router | — |
| Juniper Networks Session Smart Conductor | — |
- 1.Install the security updates Adobe, Veeam and Juniper released for the named products.
- CVEs
- CVE-2026-109618
- Vendors
- AdobeVeeamJuniper Networks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-109618 | OOM longjmp memory flaw enabling RCE in PHP | 9.2 | 100% | KEVPoC ×25 | KEV |
From the original article
2 min read at securityweek.com
The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation. The post Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.