Key vulnerabilities of week 35 of 2026: Adobe, Chrome, WordPress and others

The RIA overview covers critical and high-impact vulnerabilities in Adobe Campaign Classic, Chrome, WordPress plugins and themes, Spring Framework, PaperCut, Apache CloudStack, Zimbra, ServiceNow AI Platform, Ubiquiti software, cPanel and the SonicWall NetExtender Linux client. PaperCut and Zimbra vulnerabilities are being exploited in attacks; ENISA added new entries to its database of exploited vulnerabilities.