LIVE · cybersecurity feed
Live wire
cve recordcritical

CVE-2026-48449

adobe · campaign

Published
CVSS10
Severitycritical
WeaknessCWE-863
ExploitedNot in CISA KEV

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

References

← Back to the CVE Tracker

Our coverage of CVE-2026-48449

CVE-2026-48449critical

Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

Adobe has released a security update for its enterprise marketing automation platform, Campaign Classic, addressing a critical vulnerability that could allow attackers to execute arbitrary code remotely without user interaction. The flaw, identified as CVE-2026-48449, carries a maximum CVSS score of 10.0, indicating its severe potential impact.

CVE-2026-48449

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

Adobe has issued security updates to address a critical vulnerability in its enterprise marketing automation platform, Campaign Classic (ACC). The flaw, identified as CVE-2026-48449, has been assigned a maximum severity score of 10.0 on the CVSS scale. This vulnerability could potentially allow for arbitrary code execution without requiring user interaction.