CVE-2026-48449

Published Jul 30, 2026

Last updated 11 hours ago

Adobe Campaign Classic

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-48449 identifies an Incorrect Authorization vulnerability within Adobe Campaign Classic (ACC) that could lead to arbitrary code execution in the context of the current user. This flaw affects Adobe Campaign Classic deployments up to and including version 7.4.3 build 9397. Exploitation of this vulnerability does not require user interaction or special privileges, and it can be carried out remotely over a network. The scope of the vulnerability is changed, indicating that successful exploitation can impact components beyond the vulnerable one. Adobe released a security update, APSB26-114, with version 7.4.3 build 9398 containing the fix.

Description: Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Source: psirt@adobe.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 10
Impact score: 6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

psirt@adobe.com: CWE-863

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

References