AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-75699

Adobe Campaign Classic: code injection

Adobe

CVE-2026-75699 · Published Sep 22, 2026 · updated Sep 26, 2026

Critical10.0
No fix yet
Adobe advisory

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Affected versions

PackageAffectedFixed in
Adobe Campaign Classic
Product
<= 7.4.4 build 9401No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-94

More Adobe advisories

All Adobe
Medium 5.5Sep 22Adobe Content Credentials: integer overflowCVE-2026-89277no fix yetHigh 7.8Sep 22Adobe Substance3D - Modeler: out-of-bounds writeCVE-2026-83963no fix yetMedium 6.2Sep 22Adobe Connect: improper certificate validationCVE-2026-83964no fix yetHigh 7.1Sep 22Adobe Premiere: server-side request forgeryCVE-2026-84395no fix yetMedium 5.5Sep 22Adobe InDesign Desktop: null pointer dereferenceCVE-2026-84396no fix yetHigh 7.8Sep 22Adobe Substance3D - Modeler: out-of-bounds writeCVE-2026-81998no fix yet