CVE-2026-27302: Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Published Apr 14, 2026
·Updated
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
2 affected components
Adobe Adobe Campaign Classic (ACC)
Adobe Campaign>=7.2.1<7.4.4
Event History
Apr 14, 2026
CVE Published
12:00 AM
Data Sourced
12:00 AM
SeverityWeaknessAffected Software
Aug 11, 2026
CVE Published
via MITRE·05:46 PM
Data Sourced
via MITRE·05:46 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2026-27302?
CVE-2026-27302 has a critical severity rating of 10.
2
How do I fix CVE-2026-27302?
To address CVE-2026-27302, you should apply the latest security patches provided by Adobe.
3
What types of attacks can exploit CVE-2026-27302?
CVE-2026-27302 can be exploited for arbitrary code execution without user interaction.
4
What systems are affected by CVE-2026-27302?
CVE-2026-27302 affects Adobe Campaign Classic (ACC) software.
5
Who can be impacted by CVE-2026-27302?
Users of Adobe Campaign Classic are at risk of being impacted by CVE-2026-27302.