VulnerabilitycriticalExploited in the wild

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

The Hacker Newsby @TheHackersNewsAug 1, 2026 · 07:12 UTC (Aug 1, 2026)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-48449 CVE-2026-48448 CVE-2026-48395 CVE-2026-48396 CVE-2026-48390 CVE-2026-48391 CVE-2026-48374 CVE-2026-48392 CVE-2026-48393 CVE-2026-48394

Tags: cve-2026-48390 cve-2026-48395 cve-2026-48396 cve-2026-48448 cve-2026-48449 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-48396 +7 related CVEs CVE-2026-48395 CVE-2026-48391 CVE-2026-48390 CVE-2026-48374 CVE-2026-48392 CVE-2026-48393 CVE-2026-48394	Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user	8.6 group max	<1%		Jul 28, 2026
CVE-2026-48449 +1 related CVE CVE-2026-48448	Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the…	9.8 group max	<1%		Jul 30, 2026

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Aug 01, 2026 Vulnerability / Enterprise Security Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449 , carries a severity score of 10. 0 on the CVSS scoring system.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.