{"id":3832,"date":"2026-10-28T12:01:02","date_gmt":"2026-10-28T12:01:02","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3832"},"modified":"2026-10-28T12:01:02","modified_gmt":"2026-10-28T12:01:02","slug":"adobe-fixes-8-critical-campaign-classic-flaws-allowing-code-execution-and-security-bypass","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3832","title":{"rendered":"Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass"},"content":{"rendered":"<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">Oct 28, 2026<\/span><\/span><span class=\"p-tags\">Vulnerability \/ Web Security<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh3z7SDPF49VtrfeTS8qZD9-Rv1ne3ZUL2KLJZklOlASYXMnjBQXmmIYZ-wAC9PR248ntUBTyZLq2G6TPVYLZ-aEN7fDFc4pcEhSbt_vj36JTbujGJ2UHTbxFDUOiDvYDyKl7NpCvSMlySdqWjPhyphenhyphenFUNTkC38Ej0biyWHeF1u4kFHCe4tkJjgCW6RCHttx_\/s1700-nu-rw-lo-l85-e365\/adobe-main.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><\/a><\/div>\n<p>Adobe has released patches to address <a href=\"https:\/\/www.adobe.com\/trust\/security\/products\/campaign\/apsb26-162.html\" target=\"_blank\">multiple critical security flaws<\/a> in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation.<\/p>\n<p>The list of eight vulnerabilities is as follows &#8211;<\/p>\n<ul>\n<li>CVE-2026-104351 (CVSS score: 9.9) &#8211; A code injection vulnerability that could lead to arbitrary code execution.<\/li>\n<li>CVE-2026-104353 (CVSS score: 9.9) &#8211; An operating system code injection vulnerability that could lead to arbitrary code execution.<\/li>\n<li>CVE-2026-105780 (CVSS score: 9.9) &#8211; An incorrect authorization vulnerability that could lead to arbitrary code execution.<\/li>\n<li>CVE-2026-105489 (CVSS score: 9.9) &#8211; An SQL injection vulnerability that could lead to security feature bypass.<\/li>\n<li>CVE-2026-105781 (CVSS score: 9.8) &#8211; An SQL injection vulnerability that could lead to security feature bypass.<\/li>\n<li>CVE-2026-104350 (CVSS score: 9.3) &#8211; A reflected cross-site scripting vulnerability that could lead to privilege escalation.<\/li>\n<li>CVE-2026-104354 (CVSS score: 9.1) &#8211; An SQL injection vulnerability that could lead to security feature bypass.<\/li>\n<li>CVE-2026-105779 (CVSS score: 9.1) &#8211; An SQL injection vulnerability that could lead to security feature bypass.<\/li>\n<\/ul>\n<p>The issues affect Adobe Campaign Classic versions 7.4.4 build 9402 and earlier for Windows and Linux. They have been patched in version 7.4.4 build 9403.<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/ai-security-guide-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgasUea1PyqjHgZ4PrtmNHQRiRuIWuKqadF1Y1kDkBQlmLoAduaR0D2D5_AgqPzyreZSALvgtryBe5zD3YTk_Q65XX762OpyZGzSzGT8nzn5QlFoiKE6Dqq8rZUJm2Sn_3-epxU4vcpXR-a9JZKHBO4Bq9_nIlpaEEgDZ0oMEEDi4q9NmkHkHuZofDor0TO\/s728-nu-rw-lo-l85-e365\/nudge-2-d.png\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>Also resolved by Adobe is a critical code injection flaw in Adobe Connect Desktop and Mobile for Windows, macOS, and Android (<a href=\"https:\/\/www.adobe.com\/trust\/security\/products\/connect\/apsb26-182.html\" target=\"_blank\">CVE-2026-48360<\/a>, CVSS score: 9.6) that could result in arbitrary code execution.<\/p>\n<p>The vulnerability has been fixed in the following versions &#8211;<\/p>\n<ul>\n<li>\n    Adobe Connect Desktop &#8211; <\/p>\n<ul>\n<li>Windows: version 2026.9.61<\/li>\n<li>macOS Silicon: version 2026.10.66<\/li>\n<li>macOS Intel: version 2026.10.170<\/li>\n<\/ul>\n<\/li>\n<li>Adobe Connect Mobile for Android version 4.5<\/li>\n<\/ul>\n<p>Adobe said it&#8217;s not \u00abaware of any exploits in the wild for any of the issues\u00bb addressed in the update. Users are advised to update to the latest version for optimal protection.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ue804Ravie Lakshmanan\ue802Oct 28, 2026Vulnerability \/ Web Security Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution,&hellip;<\/p>\n","protected":false},"author":1,"featured_media":3833,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1135,60,394,6,2287,10,58,13,655,11,47],"class_list":["post-3832","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-adobe","tag-allowing","tag-bypass","tag-campaign","tag-classic","tag-code","tag-critical","tag-execution","tag-fixes","tag-flaws","tag-security"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3832","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3832"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3832\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/3833"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3832"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3832"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3832"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}