{"id":2162,"date":"2026-08-01T07:26:00","date_gmt":"2026-08-01T07:26:00","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=2162"},"modified":"2026-08-01T07:26:00","modified_gmt":"2026-08-01T07:26:00","slug":"adobe-campaign-classic-cvss-10-0-flaw-could-run-code-without-user-interaction","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=2162","title":{"rendered":"Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Aug 01, 2026<\/span><\/span>Vulnerability \/ Enterprise Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution.<\/p>\n

The vulnerability, tracked as CVE-2026-48449<\/strong>, carries a severity score of 10.0 on the CVSS scoring system.<\/p>\n

It has been described as a case of incorrect authorization that could result in arbitrary code execution in the context of the current user without requiring any user interaction.<\/p>\n

The update also resolves another high-severity flaw (CVE-2026-48448<\/strong>, CVSS score: 8.6) stemming from SQL injection that could pave the way for arbitrary file reads.<\/p>\n

\u00abThis update addresses critical vulnerabilities that could result in\u202farbitrary code execution and arbitrary file system read,\u00bb Adobe said<\/a> in an advisory. The company noted that it’s not aware of any of the flaws being exploited in the wild.<\/p>\n

Both shortcomings have been addressed in ACC v7: 7.4.3 build 9398 for Windows and Linux.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

Separately, Adobe has also shipped updates to remediate eight critical-rated flaws<\/a> in Adobe Bridge that could lead to privilege escalation and arbitrary code execution –<\/p>\n