CVE-2026-75703
Code Injection in Adobe Campaign Classic (CVE-2026-75703)
- CVSS 3.1
- 10.0 critical
- EPSS
- —
- Published
- ·
- Modified
Adobe Campaign Classic is affected by an Improper Control of Generation of Code (Code Injection) vulnerability that allows arbitrary code execution in the context of the current user. The vulnerability is triggered by exploiting a flaw in code generation, and an attacker can execute arbitrary code without user interaction. Affected parties include Adobe Campaign Classic and its affected versions. The current exploitation status is none_known, as no public PoC or known installation data is available.
What to do: Upgrade to patched versions of Adobe Campaign Classic. Implement strict code validation and runtime security controls to prevent Code Injection. Monitor for unauthorized code execution and patch any exposed components promptly.
| Product | Affected |
|---|---|
| Adobe Campaign Classic | — |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
In the news
0 storiesNo ingested article mentions this CVE yet.