Securityweek Adobe, Veeam, and Juniper Networks Address Critical Vulnerabilities
Article Content
- •Adobe patched 12 vulnerabilities, including eight critical flaws in Campaign Classic.
- •Veeam fixed nine vulnerabilities, with a critical issue allowing remote code execution.
- •Juniper Networks addressed 18 vulnerabilities, including two critical flaws for command execution.
Adobe, Veeam, and Juniper Networks have released patches for over three dozen vulnerabilities, including multiple critical-severity flaws. Adobe addressed 12 vulnerabilities in its products, with eight critical bugs in Campaign Classic that could lead to arbitrary code execution. Veeam patched nine vulnerabilities in its Backup for Microsoft 365 and Backup & Replication products, including a critical issue allowing remote code execution. Juniper Networks fixed 18 vulnerabilities in its Session Smart Router and Conductor, with two critical flaws enabling unauthenticated arbitrary command execution. None of the companies reported any exploitation of these vulnerabilities in the wild. However, Juniper Networks noted that CVE-2026-109618, affecting Junos OS, is not exploitable. The updates are crucial for maintaining security across affected systems.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Hive, Adobe and CVE-2026-101767 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which Adobe products are affected?
What critical issues did Veeam address?
Is there evidence of exploitation?
Continue Reading
Ukrainian Ransomware Affiliate Sentenced to 70 Months for Attacks on Critical Infrastructure Artem Stryzhak, a 36-year-old Ukrainian national, was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and businesses worldwide from 2018 to 2021. He was involved with the Nefilim and Hive ransomware groups, extorting millions from victims, including… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…