CVE-2026-1043519.9Critical
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
Adobe · Adobe Campaign Classic
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
9.9CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Coverage2 articles · 2 outlets
First in our coverage: SecurityOnline, 28 Oct.
- Adobe patches nine flaws in Campaign Classic and ConnectSecurityOnline · first in our coverage
The latest 1 of 2 articles are listed. Every article is in the RSS feed and search.