Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-27302: Adobe Campaign Classic: Unauthorized Code Execution

CVE-2026-27302 CVE-2026-27302

Summary

Adobe Campaign Classic allows unauthorized code to be executed by an attacker, potentially leading to data theft or system compromise. This vulnerability can be exploited without requiring user interaction. It's essential to update Adobe Campaign Classic to the latest version to address this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions
adobe	adobe campaign classic	<= ACC v7: 7.4.3 build 9399

Original title

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

Original description

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

nvd CVSS3.1 10.0

Vulnerability type

CWE-863 Incorrect Authorization

https://helpx.adobe.com/security/products/campaign/apsb26-123.html

Published: 11 Aug 2026 · Updated: 11 Aug 2026 · First seen: 11 Aug 2026