CVE-2026-48333
published 2026-08-03CVE-2026-48333: Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this…
PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.95%
60.8th percentile
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | adobe_campaign_classic | <= ACC v7: 7.4.3 build 9398 | — |
| adobe | campaign | <= 7.4.2 | — |
| adobe | campaign | — | — |
| adobe | campaign | — | — |
| adobe | campaign | — | — |
| adobe | campaign | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Adobe Campaign Classic improper authorization
vuldb·2026-08-04·CVSS 9.8
CVE-2026-48333 [CRITICAL] Adobe Campaign Classic improper authorization
A vulnerability described as critical has been identified in Adobe Campaign Classic. This affects an unknown function. Such manipulation leads to improper authorization.
This vulnerability is uniquely identified as CVE-2026-48333. The attack can be launched remotely. No exploit exists.
GHSA
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
ghsa_unreviewed·2026-08-04
CVE-2026-48333 [CRITICAL] CWE-863 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-03
Published