CVE-2026-71398
CriticalCVSS 10.0Summary
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Risk Assessment
The risk includes arbitrary code execution in the user context, potentially leading to unauthorized access to data and systems.
Recommendation
It is recommended to apply patches provided by Adobe and implement the principle of least privilege.
Original NVD description (English source)
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.