Skip to content
Sign in

Adobe product

Campaign Classic

Alert
No Campaign Classic CVE is in the CISA KEV catalogue.

Tracked since 1 Jul · latest article 28 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

2Articles · 7 days

usual rate

Exploited, by due date

No Campaign Classic CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Campaign Classic CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Campaign Classic CVE to KEV.

Fix listed

13 of 13 CVEs in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-48323: 71.7th percentileCVE-2026-48286: 67.2th percentileCVE-2026-48330: 63.7th percentileCVE-2026-48331: 60.9th percentileCVE-2026-48449: 58.2th percentileCVE-2026-48448: 46th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-4832371.7
CVE-2026-4828667.2
CVE-2026-4833063.7
CVE-2026-4833160.9
CVE-2026-4844958.2
CVE-2026-4844846

Coverage5 articles · all time

The latest 5 articles naming Campaign Classic, in the shared story grammar.

Full timeline
Developinglatest 57 minutes ago5 articles4 outlets

5 articles from 4 outlets since 1 Jul. Picked up again today after 12 weeks quiet.

Now1 Jul21 Aug345First reportSecurityWeek · 1 Jul, 11:51Picked up againafter 4 weeks quiet
  • Wed 1 Jul, 11:51 UTC. SecurityWeek, first report. Adobe fixes ColdFusion Campaign Classic bugs, urges patch.
  • Sat 1 Aug, 13:05 UTC. Security Affairs, its first report on the story. Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic.
  • Tue 4 Aug, 03:21 UTC. SecurityOnline, its first report on the story. Adobe Campaign Classic CVE-2026-48331 Scores CVSS 10.0 for Arbitrary Code Execution.
  • Wed 28 Oct, 10:30 UTC. SecurityOnline. Adobe patches nine flaws in Campaign Classic and Connect.
  • Wed 28 Oct, 12:00 UTC. The Hacker News, its first report on the story. Adobe fixes eight critical Campaign Classic flaws enabling code execution.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 5 articles as a list
  1. Wed 1 JulDay 01
    1. Adobe fixes ColdFusion Campaign Classic bugs, urges patch11:51 · SecurityWeek · First report

  2. Quiet for 4 weeks

    Sat 1 AugDay 311
    1. Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic13:05 · Security Affairs · Picked up again

  3. Quiet for 3 days

    Tue 4 AugDay 341
    1. Adobe Campaign Classic CVE-2026-48331 Scores CVSS 10.0 for Arbitrary Code Execution03:21 · SecurityOnline · Picked up again

  4. Quiet for 12 weeks

    Wed 28 OctDay 1192
    1. Adobe patches nine flaws in Campaign Classic and Connect10:30 · SecurityOnline · Picked up again
    2. Adobe fixes eight critical Campaign Classic flaws enabling code execution12:00 · The Hacker News

All CVEs in coverage13

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-48323

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    10.0Critical1.4% EPSS · 1 article
  • CVE-2026-48286

    Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

    10.0Critical1.2% EPSS · 1 article
  • CVE-2026-48330

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    10.0Critical1.0% EPSS · 1 article
  • CVE-2026-48331

    Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

    10.0Critical0.9% EPSS · 1 article
  • CVE-2026-48449

    Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

    10.0Critical0.9% EPSS · 1 article
  • CVE-2026-48448

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    8.6High0.6% EPSS · 1 article
  • CVE-2026-104350

    Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)

    9.3Critical1 article
  • CVE-2026-104354

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    9.1Critical1 article
  • CVE-2026-105781

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    10.0Critical2 articles
  • CVE-2026-105489

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    9.9Critical2 articles
  • CVE-2026-105780

    Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

    9.9Critical2 articles
  • CVE-2026-104353

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

    9.9Critical2 articles
Show 1 more CVEs
  • CVE-2026-104351

    Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    9.9Critical2 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in