CVE-2026-48286
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk49th percentile — higher than 49% of all known CVEs
Summary
Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation does not require user interaction and the scope is changed.
Risk Assessment
An attacker can take over a user account and execute malicious code, leading to compromise of data confidentiality, integrity, and availability within the organization.
Recommendation
Immediately update Adobe Campaign Classic to a version later than 7.4.3 build 9396, which includes a fix for this vulnerability.
Original NVD description (English source)
Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.