CVE-2026-48449
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation does not require user interaction, and scope is changed.
Risk Assessment
An attacker can execute arbitrary code in the context of a logged-in user, potentially leading to unauthorized data and system access.
Recommendation
Apply the patch provided by Adobe for Adobe Campaign Classic (ACC). Restrict system access to trusted users only.
Original NVD description (English source)
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.