CVE-2026-48286
Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
View on NVDAnalysis
Adobe Campaign Classic versiones 7.4.3 build 9396 y anteriores presentan una vulnerabilidad crítica de autorización incorrecta que permite la ejecución de código arbitrario. El ataque no requiere interacción del usuario y permite comprometer completamente el entorno donde se ejecuta la aplicación. Se recomienda actualizar inmediatamente a una versión corregida debido a su puntaje de severidad máximo de 10.0.
Relevant roles
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCWE-863EPSS
No EPSS score yet (CVE may be too fresh).
Technical description
Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.