AdobeCVE-2026-48333
Adobe Campaign Classic: improper authorization
Critical9.8CVE-2026-48333 · Published Aug 3, 2026 · updated Aug 28, 2026
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Adobe Campaign Classic Product | <= ACC v7: 7.4.3 build 9398 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-863
More Adobe advisories
All Adobe| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 3 | Adobe Campaign Classic: code execution | Critical10.0 | No fix yet |
| Aug 3 | Adobe Campaign Classic: SQL injection | Critical9.9 | No fix yet |
| Aug 3 | Adobe Campaign Classic: SQL injection | Critical10.0 | No fix yet |
| Aug 3 | Adobe Campaign Classic: server-side request forgery | Critical10.0 | No fix yet |
| Aug 3 | Adobe Campaign Classic: security feature bypass | High7.5 | No fix yet |
| Aug 3 | Adobe Campaign Classic: code execution | Critical9.6 | No fix yet |