Adobe and Nvidia Patch Dozens of Vulnerabilities Across Multiple Products, Including Two Critical Flaws in Nvidia's NemoClaw AI Agent Stack and a CVSS 10.0 Adobe Campaign Classic Chain
Adobe and Nvidia Patch Dozens of Vulnerabilities Across (TL-2026-2152) is a critical-severity software vulnerability scored CVSS 10, first published 2026-08-26 and last reviewed 2026-09-02. It has no confirmed attribution, affects Adobe Campaign Classic (ACC), references 81 CVEs (CVE-2026-76193, CVE-2026-76195, CVE-2026-76197), maps to 28 MITRE ATT&CK / ATLAS techniques (AML.T0011, AML.T0018, AML.T0040), and is covered by 9 detection rules and 36 indicators of compromise.
Key facts for TL-2026-2152
- Threat ID
- TL-2026-2152
- Severity
- CRITICAL
- CVSS
- 10 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
- Status
- PATCHED
- Category
- VULNERABILITY
- First published
- 2026-08-26
- Last reviewed
- 2026-09-02
- Attribution confidence
- LOW
- Motivation
- UNKNOWN
- Target sectors
- technology, media-entertainment, manufacturing, cloud-computing, government administration
- Target regions
- Global
- Detection rules
- 9
- Indicators of compromise
- 36
- Updates
- 2026-09-02 · 2 updates · revalidated 2× · latest source
Adobe shipped seven security bulletins on August 25-26, 2026 fixing 38 vulnerabilities across Campaign Classic, Content Credentials SDK/CAI, Illustrator, Substance 3D Designer/Sampler/Painter, and XD, including three unauthenticated CVSS 10.0 Campaign Classic flaws (SSRF, two OS command injections). Separately, Nvidia's August 2026 bulletin cycle patched 33 CVEs across NemoClaw/OpenShell (18, two critical up to 9.9 — a sandbox-provisioning filter bypass and a full sandbox escape), DGX Spark firmware, Unified Fabric Manager, Cumulus Linux/NVOS, and Triton Inference Server. Neither vendor reports in-the-wild exploitation, though the NemoClaw/OpenShell flaws had a public technical write-up (DNS-rebinding attack against an unauthenticated Ollama backend) from Oasis Security prior to patch release.
How Adobe and Nvidia Patch Dozens of Vulnerabilities Across works
On August 25-26, 2026, Adobe and Nvidia both released large batches of security patches, prompting a consolidated SecurityWeek roundup. Adobe's cycle (its second of August 2026) covers seven products in seven APSB bulletins totaling 38 CVEs. The highest-impact issues sit in Adobe Campaign Classic (on-premise/hybrid ACC builds up to 7.4.4 build 9400): CVE-2026-76193 is an unauthenticated server-side request forgery (CWE-918, CVSS 10.0) with a changed scope, and CVE-2026-76195 / CVE-2026-76197 are unauthenticated OS command injection flaws (CWE-78, CVSS 10.0 each) — all three permit remote arbitrary code execution against internet-facing marketing-automation servers with no privileges and no user interaction. Adobe-hosted Campaign Classic instances were already remediated; on-premise/hybrid customers must patch. The remaining six Adobe bulletins are lower-severity but still numerous: Content Credentials SDK / Content Authenticity Initiative (CAI) libraries received 6 fixes for denial-of-service (uncontrolled resource consumption, integer underflow) and an arbitrary-filesystem-read flaw (CVE-2026-76198) triggered by opening a malicious asset; Substance 3D Sampler (10 CVEs), Substance 3D Designer (9 CVEs), and Substance 3D Painter (8 CVEs) all received near-identical batches of out-of-bounds-write / heap- and stack-based buffer overflow fixes (CVSS 7.8, CWE-787/CWE-122/CWE-121) that execute arbitrary code in the current user's context when a victim opens a malicious 3D asset file; Illustrator got one medium out-of-bounds-read information-disclosure fix (CVE-2026-71441); Adobe XD got one high-severity buffer overflow (CVE-2026-71399, CWE-120) requiring the victim to open a malicious file. Adobe states none of the 38 CVEs were known to be exploited or publicly disclosed prior to the fix.
Nvidia's parallel cycle patched 33 CVEs across five bulletins published August 4-25, 2026. The most severe cluster is NemoClaw (Nvidia's open-source reference deployment stack for running agents such as OpenClaw against a local Ollama inference backend inside Nvidia's OpenShell sandbox) and OpenShell itself: 18 CVEs, two of them critical (CVE-2026-65083, CVSS 9.9, an incomplete disallowed-inputs list in the OpenShell sandbox-provisioning API that lets a caller escape intended input restrictions; CVE-2026-65093, CVSS 9.9, a direct sandbox-escape vulnerability, CWE-427 uncontrolled search path element) and twelve rated high (7.0-8.8), spanning OS command injection in NemoClaw's status/logs plugin, NIM management component, Telegram bridge, and CLI (all CWE-78); untrusted code execution during installation and integrity-check bypasses in install/deployment scripts (CWE-494, CWE-295); a weak/legacy authentication mechanism in the remote-access helper workflow (CWE-1390); and unauthenticated access to the local inference service itself (CVE-2026-65105, CVSS 8.1) because NemoClaw binds Ollama to 0.0.0.0:11434 to let the OpenShell container reach it, which simultaneously disables Ollama's Host-header validation and exposes the unauthenticated Ollama API to the entire local network. Independent research published by Oasis Security in the days before the patch documented a full attack chain: an attacker-controlled webpage uses DNS rebinding to defeat the browser's same-origin policy, then calls Ollama's /api/show and /api/create endpoints to fetch and re-upload a model whose Go text/template has been poisoned with malicious rendering instructions — persistently hijacking the victim's local AI agent from a single page visit, no authentication required. Nvidia's other four bulletins are narrower: DGX Spark AI-computer UEFI/system firmware (5 CVEs, 3 high, requiring a privileged local attacker, out-of-bounds write and NULL-pointer-dereference primitives with a changed/escalated scope, CWE-787/CWE-476/CWE-693); Unified Fabric Manager (5 CVEs, 2 high including CVE-2026-24170, CVSS 8.8, an improper-authentication bypass via crafted HTTP requests to the web interface, and CVE-2026-24169, CVSS 8.0, code injection in the plugin-management API reachable by a low-privileged authenticated user, plus 3 medium command-injection/hard-coded-key issues); Cumulus Linux and NVOS (3 CVEs, all high: CWE-250 privilege escalation via the user-management component, CWE-120 LLDP-daemon buffer overflow reachable from an adjacent network, and CWE-288 authentication bypass via an alternate SSH path in PKA-only mode); and Triton Inference Server across two separate August bulletins — a medium MLflow-plugin path-traversal file-access issue (CVE-2026-47487, CVSS 4.4, fixed in 26.03) and a later critical unauthenticated path-traversal denial-of-service flaw (CVE-2026-47627, CVSS 9.8, CWE-22, affecting versions up to 26.05, fixed in 26.06). Nvidia reports no evidence of in-the-wild exploitation for any of the 33 CVEs.
MITRE ATT&CK / ATLAS techniques used in TL-2026-2152
Initial Access
AML.T0011 User Execution; T1189 Drive-by Compromise; T1190 Exploit Public-Facing Application; T1195 Supply Chain Compromise
ML Attack Staging
AML.T0018 Backdoor ML Model
ML Model Access
AML.T0040 ML Model Inference API Access
Discovery
AML.T0056 Extract LLM System Prompt; T1046 Network Service Discovery; T1082 System Information Discovery; T1518 Software Discovery
Collection
Execution
T1059 Command and Scripting Interpreter; T1059.003 Command and Scripting Interpreter: Windows Command Shell; T1059.004 Command and Scripting Interpreter: Unix Shell; T1203 Exploitation for Client Execution
Privilege Escalation
T1068 Exploitation for Privilege Escalation
Command and Control
Credential Access
T1212 Exploitation for Credential Access; T1552 Unsecured Credentials; T1557 Adversary-in-the-Middle
Impact
T1485 Data Destruction; T1499 Endpoint Denial of Service; T1531 Account Access Removal
Resource Development
T1583.001 Acquire Infrastructure: Domains; T1588.006 Obtain Capabilities: Vulnerabilities
Reconnaissance
T1592.002 Gather Victim Host Information: Software; T1595.002 Active Scanning: Vulnerability Scanning
privilege-escalation
Affected products and versions in Adobe and Nvidia Patch Dozens of Vulnerabilities Across
- Adobe — Campaign Classic (ACC)
Vulnerable versions: 7.4.3 build 9398 and earlier
Fixed in: 7.4.3 build 9399 - Adobe — Illustrator
Vulnerable versions: 2026 and 2025 releases prior to August 2026 update
Fixed in: latest August 2026 update - Adobe — Substance 3D Sampler
Vulnerable versions: versions prior to the August 2026 update
Fixed in: latest August 2026 update - Adobe — Substance 3D Designer
Vulnerable versions: versions prior to the August 2026 update
Fixed in: latest August 2026 update - Adobe — Substance 3D Painter
Vulnerable versions: versions prior to the August 2026 update
Fixed in: latest August 2026 update - Adobe — XD
Vulnerable versions: versions prior to the August 2026 update
Fixed in: latest August 2026 update - Adobe — Content Credentials SDK / CAI (Content Authenticity Initiative)
Vulnerable versions: versions prior to the August 2026 update
Fixed in: latest August 2026 update - Nvidia — NemoClaw
Vulnerable versions: 0-0.0.1 through 0-0.0.25 depending on component
Fixed in: latest patched commits per bulletin 5872 - Nvidia — OpenShell
Vulnerable versions: 0-0.0.33
Fixed in: 0.0.34 - Nvidia — DGX Spark (UEFI/system firmware)
Vulnerable versions: 0-1.110.12
Fixed in: 1.110.13
Remediation for Adobe and Nvidia Patch Dozens of Vulnerabilities Across
Patches
- Adobe Campaign Classic ACC v7.4.3 build 9398 and earlier -> build 9399
- Adobe Substance 3D Designer, Sampler, Painter, Illustrator, XD, Content Credentials SDK/CAI -> latest versions per respective APSB bulletins (August 25-26, 2026 cycle)
- Nvidia NemoClaw -> latest patched commits per bulletin 5872; OpenShell -> v0.0.34
- Nvidia DGX Spark -> UEFI 1.110.13
- Nvidia Unified Fabric Manager -> 6.24.1-5 (GA) / 6.23.20-3 (LTS 2025) / 6.19.15 (LTS 2024) / 6.15.17 (LTS 2023)
- Nvidia Cumulus Linux -> 5.16 (GA) / 5.11.5 / 5.9.5 (LTS); NVOS -> 25.0.2.4438 (GB300) / 25.0.2.6077 (IBSwitch XDR)
- Nvidia Triton Inference Server -> 26.03 (CVE-2026-47487) and 26.06 (CVE-2026-47627)
Immediate actions
- Patch on-premise and hybrid Adobe Campaign Classic (ACC) deployments to build 9399+ immediately — CVE-2026-76193/76195/76197 are unauthenticated, remote, CVSS 10.0 code-execution flaws on internet-facing marketing-automation infrastructure
- Update Nvidia NemoClaw and OpenShell to the latest patched commits / OpenShell v0.0.34 — two CVSS 9.9 sandbox-escape-class flaws (CVE-2026-65083, CVE-2026-65093) affect all prior OpenShell versions
- Restrict network exposure of any NemoClaw/Ollama deployment (do not leave the inference API bound to 0.0.0.0 on an untrusted network) until updated, and avoid browsing untrusted sites from a machine running NemoClaw
- Apply the Nvidia DGX Spark UEFI 1.110.13 firmware update, the Unified Fabric Manager 6.24.1-5/6.23.20-3/6.19.15/6.15.17 updates, the Cumulus Linux 5.16/5.11.5/5.9.5 and NVOS 25.0.2.4438/25.0.2.6077 updates, and the Triton Inference Server 26.06 update
Workarounds
- For NemoClaw: do not expose the Ollama inference port to untrusted networks and avoid running it alongside untrusted browser sessions until patched
- For NVOS PKA-only deployments: audit SSH authentication paths and admin-certificate operations for the alternate-path bypass (CVE-2026-24185) pending update
Longer-term hardening
- Inventory all Substance 3D Designer/Sampler/Painter, Illustrator, and XD installations and enforce automatic update policies given the recurring cadence of malicious-file-triggered memory-corruption fixes in the Substance 3D line
- Network-segment AI/ML infrastructure (NemoClaw/OpenShell hosts, Triton Inference Server, DGX Spark, UFM-managed fabric) away from general user network segments given the adjacent-network and local-network attack vectors present across this patch set
- Add validation of Ollama/local-LLM-backend bind addresses and Host-header enforcement to standard AI-agent deployment hardening checklists
CVEs associated with Adobe and Nvidia Patch Dozens of Vulnerabilities Across
Showing the first 60 of 81.
CVE-2026-76193CVE-2026-76195CVE-2026-76197CVE-2026-71441CVE-2026-48417CVE-2026-48418CVE-2026-48419CVE-2026-48420CVE-2026-48421CVE-2026-48422CVE-2026-48423CVE-2026-48424CVE-2026-48425CVE-2026-71382CVE-2026-48426CVE-2026-48427CVE-2026-48428CVE-2026-48429CVE-2026-48430CVE-2026-48431CVE-2026-48432CVE-2026-48433CVE-2026-71564CVE-2026-75749CVE-2026-75750CVE-2026-75752CVE-2026-75766CVE-2026-75767CVE-2026-75768CVE-2026-75769CVE-2026-75770CVE-2026-71360CVE-2026-71442CVE-2026-71443CVE-2026-71444CVE-2026-76189CVE-2026-76198CVE-2026-71399CVE-2026-65081CVE-2026-65082CVE-2026-65083CVE-2026-65084CVE-2026-65085CVE-2026-65086CVE-2026-65087CVE-2026-65088CVE-2026-65089CVE-2026-65090CVE-2026-65091CVE-2026-65092CVE-2026-65093CVE-2026-65096CVE-2026-65097CVE-2026-65098CVE-2026-65099CVE-2026-65105CVE-2026-47626CVE-2026-24263CVE-2026-24262CVE-2026-47624
Weaknesses (CWE) in Adobe and Nvidia Patch Dozens of Vulnerabilities Across
CWE-918, CWE-78, CWE-77, CWE-125, CWE-787, CWE-121, CWE-122, CWE-476, CWE-426, CWE-400
Timeline of Adobe and Nvidia Patch Dozens of Vulnerabilities Across
- Ollama v0.1.29 ships a Host-header validation fix for the original DNS-rebinding vulnerability CVE-2024-28224, but the protection only applies when Ollama is bound to a loopback address — the gap NemoClaw's 0.0.0.0 binding later reopens.
- NCC Group publishes a technical advisory on CVE-2024-28224, documenting the Ollama DNS-rebinding attack pattern later re-exposed by NemoClaw's non-loopback binding.
- Adobe publishes a critical bulletin covering ColdFusion and Campaign Classic (CVE-2026-48286, build 9397 and earlier), the first of four 2026 Campaign Classic Priority-1 bulletins.
- Adobe publishes APSB26-114 (Priority 1), patching CVE-2026-48449 (incorrect authorization, CVSS 10.0, arbitrary code execution) and CVE-2026-48448 (SQL injection, CVSS 8.6, arbitrary file read) in Campaign Classic build 9397 and earlier, fixed in build 9398.
- Adobe publishes APSB26-120 (Priority 1), patching seven Campaign Classic flaws in build 9398 and earlier (fixed in build 9399), including three further CVSS 10.0 issues (CVE-2026-48331 SSRF, CVE-2026-48323 template injection, CVE-2026-48330 unauthenticated SQL injection) plus CVE-2026-48326, CVE-2026-48317, CVE-2026-48333, and CVE-2026-48399.
- Nvidia publishes bulletin 5860 for Triton Inference Server, fixing CVE-2026-47487, a medium-severity MLflow-plugin path-traversal file-access flaw.
- NemoClaw v0.0.106 introduces a proxy-level check that refuses to start against a non-loopback Ollama backend, but the enforcement covers macOS/Linux only and does not extend to Windows/WSL.
- Nvidia publishes a second August Triton Inference Server bulletin fixing CVE-2026-47627, a critical (CVSS 9.8) unauthenticated path-traversal denial-of-service flaw.
- Nvidia publishes bulletin 5817 for Cumulus Linux and NVOS, fixing three high-severity flaws: privilege escalation (CVE-2026-24183), an LLDP-daemon buffer overflow (CVE-2026-24184), and an SSH authentication-bypass in PKA-only mode (CVE-2026-24185).
- NVIDIA PSIRT Security Bulletin 5872 identifies fixing commit f06796ff3 for CVE-2026-65105, addressing NemoClaw for Linux versions 0 through 0.0.25; NVIDIA notes 0.0.25 appears in both the affected and fixed version fields, so admins must verify the actual patch commit rather than the version string.
- Adobe releases its second August 2026 patch cycle: seven APSB bulletins covering Campaign Classic, Content Credentials SDK/CAI, Illustrator, Substance 3D Designer/Sampler/Painter, and XD, totaling 38 CVEs, including three unauthenticated CVSS 10.0 Campaign Classic flaws.
- Nvidia publishes bulletin 5809 fixing five Unified Fabric Manager vulnerabilities, including an 8.8-severity web-interface authentication bypass (CVE-2026-24170).
- Nvidia publishes bulletin 5867 fixing five DGX Spark firmware vulnerabilities, three rated high severity, requiring UEFI update 1.110.13.
- Nvidia publishes bulletin 5872 fixing 18 CVEs in NemoClaw and OpenShell, including two critical sandbox-related flaws (CVE-2026-65083, CVE-2026-65093, both CVSS 9.9).
- Oasis Security's technical write-up on the NemoClaw/Ollama DNS-rebinding and model-poisoning attack chain is published alongside multiple security-news outlets, ahead of/alongside Nvidia's fix.
- Daily CyberSecurity/SecurityOnline.info, Heise Online, and Security NEXT independently corroborate APSB26-134's CVE list, CVSS 10.0 ratings, and patch details for the Campaign Classic flaws.
- SecurityWeek publishes a consolidated roundup, "Adobe and Nvidia Patch Dozens of Vulnerabilities," summarizing both vendors' August patch cycles; both vendors confirm no in-the-wild exploitation.
- Cloud Security Alliance research note corroborates the vulnerability and details the patch gap: NemoClaw v0.0.35/v0.0.106 fixed macOS/Linux, but Windows/WSL hosts received only an installer warning, no enforced fix, at disclosure time.
- Cyber Security News publishes coverage of APSB26-134; Adobe continues to report no known exploitation in the wild or public PoC for CVE-2026-76193/76195/76197 as of this date.
Update history for TL-2026-2152
- 2026-09-02 — CVE-2026-65105: NVIDIA NemoClaw Chat Template Poisoning via DNS Rebinding: What changed No severity/status escalation to the overall roundup record (this threat's CRITICAL/CVSS 10.0 rating is driven by the separate Adobe Campaign Classic flaws, which are unaffected by this update). Within the CVE-2026-65105 sub-st
- 2026-08-27 — Adobe Campaign Classic Critical Vulnerabilities Enable Arbitrary Code Execution (CVE-2026-76197, CVE-2026-76195, CVE-2026-76193): What changed No field escalations — severity (CRITICAL), CVSS (10.0), and status of the Campaign Classic flaws are unchanged. The update corrects the recorded vulnerable/fixed build numbers (build 9400 and earlier / fixed in 7.4.4 build 940
Sources cited for Adobe and Nvidia Patch Dozens of Vulnerabilities Across
- Adobe and Nvidia Patch Dozens of Vulnerabilities
- Security Bulletin: NVIDIA NemoClaw and OpenShell - August 2026
- Security Bulletin - NVIDIA DGX Spark - August 2026
- Security Bulletin: NVIDIA Unified Fabric Manager - August 2026
- Security Bulletin: NVIDIA Cumulus Linux and NVOS - August 2026
- Security Bulletin: NVIDIA Triton Inference Server - August 2026 (CVE-2026-47487)
- Path Traversal in NVIDIA Triton Inference Server for Linux (CVE-2026-47627)
- A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
- Oasis Security Researchers Reveal Security Flaw in NemoClaw AI Agent
- NVIDIA NemoClaw Flaw Lets Attackers Hijack AI Agents With One Website Visit
- Adobe Campaign Classic CVSS 10.0: A Five-Step Check for On-Premise Admins
- CVE-2026-76193 Detail - NVD
- CVE-2026-65093 Detail - NVD
- Adobe behebt über 30 Schwachstellen in Illustrator, Campaign & Co
More in vulnerability
- Zyxel GS1900 Series Switches Stack-Based Buffer Overflow (CVE-2026-7273) Actively Exploited by Kapibala/Red Heron in Global 996-Device Campaign — Added to CISA KEV
- Click2Shell: WordPress Theme-Preview CSRF/Selector-Injection Chain to Forced Theme Install
- F5 BIG-IP DNS Denial of Service via BIND DNSSEC Random Subdomain Attack (CVE-2026-11622)
- Click2Shell WordPress Exploit Chain Lets Attackers Gain RCE With a Single Malicious Link
- SolarWinds Access Rights Manager Hard-Coded Cryptographic Key (CVE-2026-28326) Enables Unauthenticated RCE
Detection coverage for TL-2026-2152
As of 2026-09-02, Threadlinqs Intelligence publishes 9 detection rule(s) for TL-2026-2152 across Splunk SPL, Microsoft KQL and Sigma, covering 36 indicator(s) of compromise. The whole corpus is readable without an account; a free account unlocks full detection query text in Splunk SPL, Microsoft KQL and Sigma; paid tiers add raw indicator values, correlation and the MCP server. Threadlinqs MCP server · View plans.