CVE-2026-75728: Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Published Sep 22, 2026
·Updated
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.
Affected Software
6 affected components
Adobe Adobe Campaign Classic
All of the following
Any of the following
Adobe Campaign<=7.4.3
Adobe Campaign=7.4.4-9400
Adobe Campaign=7.4.4-9401
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Sep 22, 2026
CVE Published
via MITRE·05:39 PM
Data Sourced
via MITRE·05:39 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Can this be exploited remotely without credentials or user interaction?
Yes. The vector is network-based, requires low attack complexity, and does not require privileges or user interaction.
2
What is the potential impact if exploitation succeeds?
An attacker could execute arbitrary code in the context of the current user. The listed impact includes high confidentiality and integrity impact, with no availability impact indicated.