CVE-2026-48286: Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Published Jun 30, 2026
·Updated
Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
4 affected components
Adobe Adobe Campaign Classic (ACC)<=7.4.3 build 9396
All of the following
Adobe Campaign<=7.4.3
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Jun 30, 2026
CVE Published
via MITRE·03:08 PM
Data Sourced
via MITRE·03:08 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Jul 1, 2026
News Published
via BleepingComputer·07:34 AM
Jul 2, 2026
News Published
via BleepingComputer·07:37 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-48286?
The severity of CVE-2026-48286 is critical with a score of 10.
2
What is the risk associated with CVE-2026-48286?
CVE-2026-48286 has a risk rating of 90.
3
How do I fix CVE-2026-48286?
To fix CVE-2026-48286, update Adobe Campaign Classic (ACC) to version 7.4.3 build 9397 or later.
4
What type of vulnerability is CVE-2026-48286?
CVE-2026-48286 is classified as an Incorrect Authorization vulnerability (CWE-863).
5
Can exploitation of CVE-2026-48286 occur without user interaction?
Yes, exploitation of CVE-2026-48286 does not require user interaction.