importantSYS.SOURCE: The Hacker News• 2026-08-01T12:42:42+05:30
Adobe Campaign Classic CVSS 10.0 Critical Vulnerability Enables Arbitrary Code Execution Without User Interaction
Adobe has addressed a critical vulnerability (CVE-2026-48449) in Adobe Campaign Classic with a CVSS score of 10.0, enabling arbitrary code execution without user interaction. The update also resolved multiple high-severity flaws, including SQL injection and privilege escalation vulnerabilities across Adobe products.
Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution.
The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system.
It has been described as a case of incorrect authorization that could result in
*** END OF TRANSMISSION ***