Adobe and Nvidia Patch Dozens of Vulnerabilities Across Multiple Products, Including Two Critical Flaws in Nvidia's NemoClaw AI Agent Stack and a CVSS 10.0 Adobe Campaign Classic Chain

Key facts

Detection coverage

As of 2026-09-02, Threadlinqs Intelligence publishes 9 detection rule(s) for TL-2026-2152 across Splunk SPL, Microsoft KQL and Sigma, covering 36 indicator(s) of compromise. The whole corpus is readable without an account. Every threat comes with one complete detection in Splunk SPL, Microsoft KQL and Sigma, free for everyone; a free account adds daily TL Creds to unlock the rest. Paid plans add a larger daily allowance, correlation and the MCP server. Threadlinqs MCP server · View plans.

Free detection: NemoClaw/OpenShell Sandbox Escape and Unauthenticated Ollama Model-Poisoning Chain (CVE-2026-65083/65093/65105)

Detects the Oasis Security-documented attack chain: an attacker-controlled webpage abuses DNS rebinding to reach a NemoClaw host's Ollama backend (bound unauthenticated to 0.0.0.0:11434), then calls /api/show and /api/create to fetch and re-upload a Go text/template-poisoned model, persistently hijacking the local AI agent. Also flags OpenShell sandbox-provisioning filter-bypass/escape indicators (CVE-2026-65083, CVE-2026-65093, both CVSS 9.9).

• Languages: Splunk SPL, Microsoft KQL, Sigma
• ATT&CK: T1611, T1195, T1552
• Data sources: ollama_api_logs, openshell_sandbox_logs, linux_auditd, network_connection_logs
• Severity: critical
• Confidence: high

Splunk SPL

index=nemoclaw OR index=ollama sourcetype IN ("ollama:api","openshell:sandbox","linux:auditd")
| eval unauth_api=if(match(_raw,"(?i)(GET|POST)\s+\/api\/(show|create|pull)\b") AND NOT match(_raw,"(?i)authorization:\s*bearer"),1,0)
| eval bind_all=if(match(_raw,"(?i)listen(ing)?\s+(on\s+)?0\.0\.0\.0:11434"),1,0)
| eval sandbox_escape=if(match(_raw,"(?i)(disallowed_inputs|sandbox.?provision|sandbox.?escape|chroot\s+bypass|search\s+path\s+element)"),1,0)
| where unauth_api=1 OR bind_all=1 OR sandbox_escape=1
| stats count as hit_count values(_raw) as sample_events earliest(_time) as first_seen latest(_time) as last_seen by src_ip, host, dest_port
| eval first_seen=strftime(first_seen,"%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen,"%Y-%m-%d %H:%M:%S")

Microsoft KQL

let RebindWindow = 5m;
DnsEvents
| where TimeGenerated > ago(24h)
| summarize DistinctIPs = dcount(IPAddresses), IPs = make_set(IPAddresses) by Name, bin(TimeGenerated, RebindWindow)
| where DistinctIPs >= 2
| join kind=inner (
    DeviceNetworkEvents
    | where TimeGenerated > ago(24h)
    | where RemotePort == 11434
    | where RemoteUrl has "/api/show" or RemoteUrl has "/api/create" or RemoteUrl has "/api/pull"
) on $left.Name == $right.RemoteUrl
| project TimeGenerated, DeviceName, Name, IPs, RemoteIP, RemotePort, RemoteUrl, InitiatingProcessFileName

Sigma

title: NemoClaw/OpenShell Sandbox Escape or Unauthenticated Ollama Exposure (CVE-2026-65083/65093/65105)
id: 9b2f7e14-3a5d-4c8e-b1f0-6d4a2c7e9f83
status: experimental
description: Detects network connections to an Ollama backend bound to 0.0.0.0:11434 with no authorization header, and OpenShell sandbox-provisioning escape indicators, matching CVE-2026-65083/65093 (CVSS 9.9 sandbox-escape class) and CVE-2026-65105 (unauthenticated Ollama exposure).
references:
  - https://thehackernews.com/2026/08/a-malicious-webpage-could-poison-your.html
  - https://securityboulevard.com/2026/08/oasis-security-researchers-reveal-security-flaw-in-nemoclaw-ai-agent/
author: Threadlinqs Team
date: 2026-08-26
tags:
  - attack.defense-evasion
  - attack.t1611
  - attack.t1195
  - cve.2026.65083
  - cve.2026.65093
  - cve.2026.65105
  - attack.tool.ollama
logsource:
  category: network_connection
  product: linux
detection:
  selection_bind:
    DestinationPort: 11434
    DestinationIp: '0.0.0.0'
  selection_escape:
    CommandLine|contains:
      - 'openshell'
      - 'sandbox-provision'
      - 'disallowed_inputs'
  condition: selection_bind or selection_escape
falsepositives:
  - Intentional local-network NemoClaw lab deployments with documented compensating network segmentation
level: critical

Known false positives:

• Intentional local-network NemoClaw/Ollama lab deployments that legitimately bind 0.0.0.0 behind a firewalled segment
• Internal CI pipelines re-pulling/re-creating models via the Ollama API with valid but unlogged service accounts

Tuning notes: Baseline which hosts are expected to run NemoClaw/Ollama and suppress bind_all alerts for hosts already network-segmented; raise severity automatically when unauth_api and bind_all co-occur on the same host within the same session.

• 🔒 Adobe Campaign Classic Unauthenticated SSRF / OS Command Injection Attempt (CVE-2026-76193/76195/76197) · unlock with TL Creds
• 🔒 DNS-Rebinding Driven Model Poisoning Against Local Ollama Backend (CVE-2026-65105, Oasis Security Chain) · unlock with TL Creds
• 🔒 Lateral Movement via UFM Authentication Bypass or Triton Path Traversal (CVE-2026-24170, CVE-2026-47627) · unlock with TL Creds
• 🔒 Adobe Campaign Classic Unauthenticated SSRF or OS Command Injection Attempt (CVE-2026-76193/76195/76197) · unlock with TL Creds
• 🔒 NemoClaw/OpenShell Sandbox Escape or Unauthenticated Ollama Exposure (CVE-2026-65083/65093/65105) · unlock with TL Creds
• 🔒 NemoClaw Command Injection Chained with Lateral-Movement Indicators (UFM/Triton) · unlock with TL Creds
• 🔒 Adobe Campaign Classic Unauthenticated SSRF / OS Command Injection Attempt (CVE-2026-76193/76195/76197) · unlock with TL Creds
• 🔒 NemoClaw Command Injection Chained with UFM Auth Bypass or Triton Path Traversal (Lateral Movement) · unlock with TL Creds

Indicators of compromise

As of 2026-09-02, Threadlinqs Intelligence tracks 36 indicators of compromise for TL-2026-2152.

Technical analysis

Neither vendor reports in-the-wild exploitation, though the NemoClaw/OpenShell flaws had a public technical write-up (DNS-rebinding attack against an unauthenticated Ollama backend) from Oasis Security prior to patch release.

On August 25-26, 2026, Adobe and Nvidia both released large batches of security patches, prompting a consolidated SecurityWeek roundup. Adobe's cycle (its second of August 2026) covers seven products in seven APSB bulletins totaling 38 CVEs. The highest-impact issues sit in Adobe Campaign Classic (on-premise/hybrid ACC builds up to 7.4.4 build 9400): CVE-2026-76193 is an unauthenticated server-side request forgery (CWE-918, CVSS 10.0) with a changed scope, and CVE-2026-76195 / CVE-2026-76197 are unauthenticated OS command injection flaws (CWE-78, CVSS 10.0 each) — all three permit remote arbitrary code execution against internet-facing marketing-automation servers with no privileges and no user interaction. Adobe-hosted Campaign Classic instances were already remediated; on-premise/hybrid customers must patch. The remaining six Adobe bulletins are lower-severity but still numerous: Content Credentials SDK / Content Authenticity Initiative (CAI) libraries received 6 fixes for denial-of-service (uncontrolled resource consumption, integer underflow) and an arbitrary-filesystem-read flaw (CVE-2026-76198) triggered by opening a malicious asset; Substance 3D Sampler (10 CVEs), Substance 3D Designer (9 CVEs), and Substance 3D Painter (8 CVEs) all received near-identical batches of out-of-bounds-write / heap- and stack-based buffer overflow fixes (CVSS 7.8, CWE-787/CWE-122/CWE-121) that execute arbitrary code in the current user's context when a victim opens a malicious 3D asset file; Illustrator got one medium out-of-bounds-read information-disclosure fix (CVE-2026-71441); Adobe XD got one high-severity buffer overflow (CVE-2026-71399, CWE-120) requiring the victim to open a malicious file. Adobe states none of the 38 CVEs were known to be exploited or publicly disclosed prior to the fix.

Nvidia's parallel cycle patched 33 CVEs across five bulletins published August 4-25, 2026. The most severe cluster is NemoClaw (Nvidia's open-source reference deployment stack for running agents such as OpenClaw against a local Ollama inference backend inside Nvidia's OpenShell sandbox) and OpenShell itself: 18 CVEs, two of them critical (CVE-2026-65083, CVSS 9.9, an incomplete disallowed-inputs list in the OpenShell sandbox-provisioning API that lets a caller escape intended input restrictions; CVE-2026-65093, CVSS 9.9, a direct sandbox-escape vulnerability, CWE-427 uncontrolled search path element) and twelve rated high (7.0-8.8), spanning OS command injection in NemoClaw's status/logs plugin, NIM management component, Telegram bridge, and CLI (all CWE-78); untrusted code execution during installation and integrity-check bypasses in install/deployment scripts (CWE-494, CWE-295); a weak/legacy authentication mechanism in the remote-access helper workflow (CWE-1390); and unauthenticated access to the local inference service itself (CVE-2026-65105, CVSS 8.1) because NemoClaw binds Ollama to 0.0.0.0:11434 to let the OpenShell container reach it, which simultaneously disables Ollama's Host-header validation and exposes the unauthenticated Ollama API to the entire local network. Independent research published by Oasis Security in the days before the patch documented a full attack chain: an attacker-controlled webpage uses DNS rebinding to defeat the browser's same-origin policy, then calls Ollama's /api/show and /api/create endpoints to fetch and re-upload a model whose Go text/template has been poisoned with malicious rendering instructions — persistently hijacking the victim's local AI agent from a single page visit, no authentication required. Nvidia's other four bulletins are narrower: DGX Spark AI-computer UEFI/system firmware (5 CVEs, 3 high, requiring a privileged local attacker, out-of-bounds write and NULL-pointer-dereference primitives with a changed/escalated scope, CWE-787/CWE-476/CWE-693); Unified Fabric Manager (5 CVEs, 2 high including CVE-2026-24170, CVSS 8.8, an improper-authentication bypass via crafted HTTP requests to the web interface, and CVE-2026-24169, CVSS 8.0, code injection in the plugin-management API reachable by a low-privileged authenticated user, plus 3 medium command-injection/hard-coded-key issues); Cumulus Linux and NVOS (3 CVEs, all high: CWE-250 privilege escalation via the user-management component, CWE-120 LLDP-daemon buffer overflow reachable from an adjacent network, and CWE-288 authentication bypass via an alternate SSH path in PKA-only mode); and Triton Inference Server across two separate August bulletins — a medium MLflow-plugin path-traversal file-access issue (CVE-2026-47487, CVSS 4.4, fixed in 26.03) and a later critical unauthenticated path-traversal denial-of-service flaw (CVE-2026-47627, CVSS 9.8, CWE-22, affecting versions up to 26.05, fixed in 26.06). Nvidia reports no evidence of in-the-wild exploitation for any of the 33 CVEs.

MITRE ATT&CK / ATLAS techniques by tactic:

Initial Access

AML.T0011 User Execution; T1189 Drive-by Compromise; T1190 Exploit Public-Facing Application; T1195 Supply Chain Compromise

ML Attack Staging

AML.T0018 Backdoor ML Model

ML Model Access

AML.T0040 ML Model Inference API Access

Discovery

AML.T0056 Extract LLM System Prompt; T1046 Network Service Discovery; T1082 System Information Discovery; T1518 Software Discovery

Collection

T1005 Data from Local System

Execution

T1059 Command and Scripting Interpreter; T1059.003 Command and Scripting Interpreter: Windows Command Shell; T1059.004 Command and Scripting Interpreter: Unix Shell; T1203 Exploitation for Client Execution

Privilege Escalation

T1068 Exploitation for Privilege Escalation

Command and Control

T1090 Proxy

Credential Access

T1212 Exploitation for Credential Access; T1552 Unsecured Credentials; T1557 Adversary-in-the-Middle

Impact

T1485 Data Destruction; T1499 Endpoint Denial of Service; T1531 Account Access Removal

Resource Development

T1583.001 Acquire Infrastructure: Domains; T1588.006 Obtain Capabilities: Vulnerabilities

Reconnaissance

T1592.002 Gather Victim Host Information: Software; T1595.002 Active Scanning: Vulnerability Scanning

privilege-escalation

T1611 Escape to Host

Remediation

Patches

• Adobe Campaign Classic ACC v7.4.3 build 9398 and earlier -> build 9399
• Adobe Substance 3D Designer, Sampler, Painter, Illustrator, XD, Content Credentials SDK/CAI -> latest versions per respective APSB bulletins (August 25-26, 2026 cycle)
• Nvidia NemoClaw -> latest patched commits per bulletin 5872; OpenShell -> v0.0.34
• Nvidia DGX Spark -> UEFI 1.110.13
• Nvidia Unified Fabric Manager -> 6.24.1-5 (GA) / 6.23.20-3 (LTS 2025) / 6.19.15 (LTS 2024) / 6.15.17 (LTS 2023)
• Nvidia Cumulus Linux -> 5.16 (GA) / 5.11.5 / 5.9.5 (LTS); NVOS -> 25.0.2.4438 (GB300) / 25.0.2.6077 (IBSwitch XDR)
• Nvidia Triton Inference Server -> 26.03 (CVE-2026-47487) and 26.06 (CVE-2026-47627)

Immediate actions

• Patch on-premise and hybrid Adobe Campaign Classic (ACC) deployments to build 9399+ immediately — CVE-2026-76193/76195/76197 are unauthenticated, remote, CVSS 10.0 code-execution flaws on internet-facing marketing-automation infrastructure
• Update Nvidia NemoClaw and OpenShell to the latest patched commits / OpenShell v0.0.34 — two CVSS 9.9 sandbox-escape-class flaws (CVE-2026-65083, CVE-2026-65093) affect all prior OpenShell versions
• Restrict network exposure of any NemoClaw/Ollama deployment (do not leave the inference API bound to 0.0.0.0 on an untrusted network) until updated, and avoid browsing untrusted sites from a machine running NemoClaw
• Apply the Nvidia DGX Spark UEFI 1.110.13 firmware update, the Unified Fabric Manager 6.24.1-5/6.23.20-3/6.19.15/6.15.17 updates, the Cumulus Linux 5.16/5.11.5/5.9.5 and NVOS 25.0.2.4438/25.0.2.6077 updates, and the Triton Inference Server 26.06 update

Workarounds

• For NemoClaw: do not expose the Ollama inference port to untrusted networks and avoid running it alongside untrusted browser sessions until patched
• For NVOS PKA-only deployments: audit SSH authentication paths and admin-certificate operations for the alternate-path bypass (CVE-2026-24185) pending update

Longer-term hardening

• Inventory all Substance 3D Designer/Sampler/Painter, Illustrator, and XD installations and enforce automatic update policies given the recurring cadence of malicious-file-triggered memory-corruption fixes in the Substance 3D line
• Network-segment AI/ML infrastructure (NemoClaw/OpenShell hosts, Triton Inference Server, DGX Spark, UFM-managed fabric) away from general user network segments given the adjacent-network and local-network attack vectors present across this patch set
• Add validation of Ollama/local-LLM-backend bind addresses and Host-header enforcement to standard AI-agent deployment hardening checklists

Affected and fixed versions

• Adobe — Campaign Classic (ACC)
  Vulnerable versions: 7.4.3 build 9398 and earlier
  Fixed in: 7.4.3 build 9399
• Adobe — Illustrator
  Vulnerable versions: 2026 and 2025 releases prior to August 2026 update
  Fixed in: latest August 2026 update
• Adobe — Substance 3D Sampler
  Vulnerable versions: versions prior to the August 2026 update
  Fixed in: latest August 2026 update
• Adobe — Substance 3D Designer
  Vulnerable versions: versions prior to the August 2026 update
  Fixed in: latest August 2026 update
• Adobe — Substance 3D Painter
  Vulnerable versions: versions prior to the August 2026 update
  Fixed in: latest August 2026 update
• Adobe — XD
  Vulnerable versions: versions prior to the August 2026 update
  Fixed in: latest August 2026 update
• Adobe — Content Credentials SDK / CAI (Content Authenticity Initiative)
  Vulnerable versions: versions prior to the August 2026 update
  Fixed in: latest August 2026 update
• Nvidia — NemoClaw
  Vulnerable versions: 0-0.0.1 through 0-0.0.25 depending on component
  Fixed in: latest patched commits per bulletin 5872
• Nvidia — OpenShell
  Vulnerable versions: 0-0.0.33
  Fixed in: 0.0.34
• Nvidia — DGX Spark (UEFI/system firmware)
  Vulnerable versions: 0-1.110.12
  Fixed in: 1.110.13

Timeline

Last updated 2026-09-02 · 2 updates · revalidated 2× · latest source

• 2024-03-14 Ollama v0.1.29 ships a Host-header validation fix for the original DNS-rebinding vulnerability CVE-2024-28224, but the protection only applies when Ollama is bound to a loopback address — the gap NemoClaw's 0.0.0.0 binding later reopens.
• 2024-04-01 NCC Group publishes a technical advisory on CVE-2024-28224, documenting the Ollama DNS-rebinding attack pattern later re-exposed by NemoClaw's non-loopback binding.
• 2026-07-01 Adobe publishes a critical bulletin covering ColdFusion and Campaign Classic (CVE-2026-48286, build 9397 and earlier), the first of four 2026 Campaign Classic Priority-1 bulletins.
• 2026-07-29 Adobe publishes APSB26-114 (Priority 1), patching CVE-2026-48449 (incorrect authorization, CVSS 10.0, arbitrary code execution) and CVE-2026-48448 (SQL injection, CVSS 8.6, arbitrary file read) in Campaign Classic build 9397 and earlier, fixed in build 9398.
• 2026-08-03 Adobe publishes APSB26-120 (Priority 1), patching seven Campaign Classic flaws in build 9398 and earlier (fixed in build 9399), including three further CVSS 10.0 issues (CVE-2026-48331 SSRF, CVE-2026-48323 template injection, CVE-2026-48330 unauthenticated SQL injection) plus CVE-2026-48326, CVE-2026-48317, CVE-2026-48333, and CVE-2026-48399.
• 2026-08-04 Nvidia publishes bulletin 5860 for Triton Inference Server, fixing CVE-2026-47487, a medium-severity MLflow-plugin path-traversal file-access flaw.
• 2026-08-10 NemoClaw v0.0.106 introduces a proxy-level check that refuses to start against a non-loopback Ollama backend, but the enforcement covers macOS/Linux only and does not extend to Windows/WSL.
• 2026-08-18 Nvidia publishes a second August Triton Inference Server bulletin fixing CVE-2026-47627, a critical (CVSS 9.8) unauthenticated path-traversal denial-of-service flaw.
• 2026-08-18 Nvidia publishes bulletin 5817 for Cumulus Linux and NVOS, fixing three high-severity flaws: privilege escalation (CVE-2026-24183), an LLDP-daemon buffer overflow (CVE-2026-24184), and an SSH authentication-bypass in PKA-only mode (CVE-2026-24185).
• 2026-08-25 NVIDIA PSIRT Security Bulletin 5872 identifies fixing commit f06796ff3 for CVE-2026-65105, addressing NemoClaw for Linux versions 0 through 0.0.25; NVIDIA notes 0.0.25 appears in both the affected and fixed version fields, so admins must verify the actual patch commit rather than the version string.
• 2026-08-25 Adobe releases its second August 2026 patch cycle: seven APSB bulletins covering Campaign Classic, Content Credentials SDK/CAI, Illustrator, Substance 3D Designer/Sampler/Painter, and XD, totaling 38 CVEs, including three unauthenticated CVSS 10.0 Campaign Classic flaws.
• 2026-08-25 Nvidia publishes bulletin 5809 fixing five Unified Fabric Manager vulnerabilities, including an 8.8-severity web-interface authentication bypass (CVE-2026-24170).
• 2026-08-25 Nvidia publishes bulletin 5867 fixing five DGX Spark firmware vulnerabilities, three rated high severity, requiring UEFI update 1.110.13.
• 2026-08-25 Nvidia publishes bulletin 5872 fixing 18 CVEs in NemoClaw and OpenShell, including two critical sandbox-related flaws (CVE-2026-65083, CVE-2026-65093, both CVSS 9.9).
• 2026-08-25 Oasis Security's technical write-up on the NemoClaw/Ollama DNS-rebinding and model-poisoning attack chain is published alongside multiple security-news outlets, ahead of/alongside Nvidia's fix.
• 2026-08-26 Daily CyberSecurity/SecurityOnline.info, Heise Online, and Security NEXT independently corroborate APSB26-134's CVE list, CVSS 10.0 ratings, and patch details for the Campaign Classic flaws.
• 2026-08-26 SecurityWeek publishes a consolidated roundup, "Adobe and Nvidia Patch Dozens of Vulnerabilities," summarizing both vendors' August patch cycles; both vendors confirm no in-the-wild exploitation.
• 2026-08-27 Cloud Security Alliance research note corroborates the vulnerability and details the patch gap: NemoClaw v0.0.35/v0.0.106 fixed macOS/Linux, but Windows/WSL hosts received only an installer warning, no enforced fix, at disclosure time.
• 2026-08-27 Cyber Security News publishes coverage of APSB26-134; Adobe continues to report no known exploitation in the wild or public PoC for CVE-2026-76193/76195/76197 as of this date.

Update history

• 2026-09-02 — CVE-2026-65105: NVIDIA NemoClaw Chat Template Poisoning via DNS Rebinding: What changed No severity/status escalation to the overall roundup record (this threat's CRITICAL/CVSS 10.0 rating is driven by the separate Adobe Campaign Classic flaws, which are unaffected by this update).
• 2026-08-27 — Adobe Campaign Classic Critical Vulnerabilities Enable Arbitrary Code Execution (CVE-2026-76197, CVE-2026-76195, CVE-2026-76193): What changed No field escalations — severity (CRITICAL), CVSS (10.0), and status of the Campaign Classic flaws are unchanged.

Sources cited

• CVE-2026-76193 Detail - NVD NVD (NIST) · Advisory · 2026-08-26
• CVE-2026-65093 Detail - NVD NVD (NIST) · Advisory · 2026-08-25
• Security Bulletin: NVIDIA NemoClaw and OpenShell - August 2026 GitHub · Vendor report · 2026-08-25
• Security Bulletin - NVIDIA DGX Spark - August 2026 GitHub · Vendor report · 2026-08-25
• Security Bulletin: NVIDIA Unified Fabric Manager - August 2026 GitHub · Vendor report · 2026-08-25
• Security Bulletin: NVIDIA Cumulus Linux and NVOS - August 2026 GitHub · Vendor report · 2026-08-18
• Security Bulletin: NVIDIA Triton Inference Server - August 2026 (CVE-2026-47487) GitHub · Vendor report · 2026-08-04
• Path Traversal in NVIDIA Triton Inference Server for Linux (CVE-2026-47627) mallory.ai · Research · 2026-08-18
• Oasis Security Researchers Reveal Security Flaw in NemoClaw AI Agent securityboulevard.com · Blog · 2026-08-25
• Adobe Campaign Classic CVSS 10.0: A Five-Step Check for On-Premise Admins aardwolfsecurity.com · Blog · 2026-08-26
• Adobe and Nvidia Patch Dozens of Vulnerabilities SecurityWeek · News · 2026-08-26
• A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw The Hacker News · News · 2026-08-25
• NVIDIA NemoClaw Flaw Lets Attackers Hijack AI Agents With One Website Visit cybersecuritynews.com · News · 2026-08-25
• Adobe behebt über 30 Schwachstellen in Illustrator, Campaign & Co pcwelt.de · News · 2026-08-26

Related threats

• Adobe Campaign Classic Critical Incorrect Authorization Flaw Enables Unauthenticated Remote Code Execution (CVE-2026-48449) Paired With SQL Injection Memory/File Disclosure (CVE-2026-48448)
• Adobe ColdFusion & Campaign Classic Priority 1 Patches for 12 Vulnerabilities Including Six Maximum-Severity RCE Flaws (APSB26-68, APSB26-69)
• Adobe Patches Critical RCE Flaws in ColdFusion, Campaign Classic, and Commerce (CVE-2026-48362, CVSS 10.0)
• wolfSSL Improper Input Validation and Integer Underflow Vulnerabilities (CVE-2026-28739, CVE-2026-25106, CVE-2026-33091)
• Adobe Patches Nine CVSS 10.0/9.3 Flaws in ColdFusion and Campaign Classic Enabling Arbitrary Code Execution (APSB26-68, APSB26-69)

Related coverage of this activity

• ColdFusion APSB26-68 priority patch
• Citrix NetScaler auth bypass
• Project Glasswing AI bug discovery
• Firefox Chrome Adobe patch wave
• Pwn2Own Berlin 2026 ESXi SharePoint

Previous and next in vulnerability

• CVE-2026-4800: Lodash `_.template` Arbitrary Code Injection — Broken 4.18.0 Patch Exposes Supply-Chain Patch-Pinning Risk Previous report
• Chrome 152.0.7977.64/.65 Fixes Critical V8 Use-After-Free (CVE-2026-78899) and ANGLE RCE (CVE-2026-79282) Next report

Further reading

• TeamPCP Supply Chain Attack on Trivy, LiteLLM