CVE-2026-48303: Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Published Jun 9, 2026
·Updated
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
5 affected components
Adobe Adobe Campaign Classic<=7.4.3 build 9394
All of the following
Any of the following
Adobe Campaign<7.4.3
Adobe Campaign=7.4.3-9394
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Jun 9, 2026
CVE Published
via MITRE·08:59 PM
Data Sourced
via MITRE·08:59 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-48303?
The severity of CVE-2026-48303 is rated as critical with a score of 10.
2
What vulnerabilities does CVE-2026-48303 exploit?
CVE-2026-48303 exploits an Incorrect Authorization vulnerability in Adobe Campaign Classic.
3
How do I mitigate CVE-2026-48303?
To mitigate CVE-2026-48303, upgrade to Adobe Campaign Classic version 7.4.4 or later.
4
What are the potential impacts of CVE-2026-48303?
Exploitation of CVE-2026-48303 can lead to arbitrary code execution in the context of the current user.
5
Does CVE-2026-48303 require user interaction for exploitation?
No, CVE-2026-48303 can be exploited without any user interaction.