OS Command Injection Vulnerability in Adobe Campaign Classic Software
CVE-2026-104353

9.9CRITICAL

Key Information:

Vendor

Adobe
Status
Adobe Campaign Classic
Vendor
CVE Published:
27 October 2026

What is CVE-2026-104353?

Adobe Campaign Classic has a vulnerability that arises from improper neutralization of special elements, enabling an OS Command Injection attack. This flaw could allow a low-privileged attacker to execute arbitrary code within the context of the currently logged-in user, with no user interaction necessary for exploitation. This poses a significant risk as it shifts the scope of potential attacks, allowing unauthorized commands to be executed, potentially compromising the integrity of the affected system.

Affected Version(s)

Adobe Campaign Classic 0 <= 7.4.4 build 9402

Adobe Campaign Classic 7.4.4 build 9403

References

https://www.adobe.com/trust/security/products/campaign/ap...
vendor-advisory

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.