CVE-2026-1043539.9Critical
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Adobe · Adobe Campaign Classic
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
9.9CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityOnline, 28 Oct.
Developinglatest 1 minutes ago2 articles2 outlets
- Wed 28 Oct, 10:30 UTC. SecurityOnline, first report. Adobe patches nine flaws in Campaign Classic and Connect.
- Wed 28 Oct, 12:00 UTC. The Hacker News, its first report on the story. Adobe fixes eight critical Campaign Classic flaws enabling code execution.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 28 Oct 10:30 | SecurityOnline | Adobe patches nine flaws in Campaign Classic and Connect |
| 28 Oct 12:00 | The Hacker News | Adobe fixes eight critical Campaign Classic flaws enabling code execution |
- Adobe fixes eight critical Campaign Classic flaws enabling code executionThe Hacker News · mentions it in passing
- Adobe patches nine flaws in Campaign Classic and ConnectSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.