CVE-2026-48399: Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker…

PriorityP348high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

0.46%

38.3th percentile

Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
adobe	adobe_campaign_classic	<= ACC v7: 7.4.3 build 9398	—
adobe	campaign	<= 7.4.2	—
adobe	campaign	—	—
adobe	campaign	—	—
adobe	campaign	—	—
adobe	campaign	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.