Back to the feed

~/article/adobe-campaign-classic-cvss-10-0-flaw-could-run-code-without-user-intera-zt15yg
highSource: The Hacker News

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system. It has been described as a case of incorrect authorization that could result in

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Referenced CVEs

Topics

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Related

~/related/adobe-campaign-classic-cvss-10-0-flaw-could-run-code-without-user-intera-zt15yg