CVE-2026-48303
published 2026-06-09CVE-2026-48303: Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code…
PriorityP267critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
EPSS
0.55%
44.0th percentile
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | adobe_campaign_classic | <= ACC v7: 7.4.3 build 9394 | — |
| adobe | campaign | < 7.4.3 | 7.4.3 |
| adobe | campaign | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Adobe Campaign Classic up to 7.4.2 authorization (apsb26-66)
vuldb·2026-08-29·CVSS 10.0
CVE-2026-48303 [CRITICAL] Adobe Campaign Classic up to 7.4.2 authorization (apsb26-66)
A vulnerability labeled as critical has been found in Adobe Campaign Classic up to 7.4.2. This affects an unknown part. The manipulation results in incorrect authorization.
This vulnerability is identified as CVE-2026-48303. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.
GHSA
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current
ghsa_unreviewed·2026-06-09
CVE-2026-48303 [CRITICAL] CWE-863 Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-09
Published