CVE-2026-27215

Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to its availability. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

• CWE-476

• https://helpx.adobe.com/security/products/substance3d_painter/apsb26-25.htmlVendor Advisory

Published

Mar 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27208bleon-ethical/api-gateway-deploy provides API gateway deploy…7.8
• CVE-2026-2721The MailArchiver plugin for WordPress is vulnerable to Store…4.8
• CVE-2026-27210Pannellum is a lightweight, free, and open source panorama v…6.1
• CVE-2026-27211Cloud Hypervisor is a Virtual Machine Monitor for Cloud work…10
• CVE-2026-27212Swiper is a free and mobile touch slider with hardware accel…7.8
• CVE-2026-27214Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-27216Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-27217Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-27218Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-27219Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-2722The Stock Ticker plugin for WordPress is vulnerable to Store…4.8
• CVE-2026-27220Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.2…7.8