Incorrect Authorization Vulnerability in Adobe Campaign Classic
CVE-2026-48286

10CRITICAL

Key Information:

Vendor

Adobe
Status
Adobe Campaign Classic (acc)
Vendor
CVE Published:
30 June 2026

What is CVE-2026-48286?

Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are vulnerable to an incorrect authorization issue, allowing an attacker to execute arbitrary code within the context of the current user without requiring any user interaction. This can lead to unauthorized actions being performed, making it essential for users to review and address potential exposure to this vulnerability to safeguard their systems.

Affected Version(s)

Adobe Campaign Classic (ACC) 0 <= 7.4.3 build 9396

References

https://helpx.adobe.com/security/products/campaign/apsb26...
vendor-advisory

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.