CVE-2026-76195: Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Published Aug 25, 2026
·Updated
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
13 affected components
Adobe Campaign Classic (ACC)
All of the following
Any of the following
Adobe Campaign<=7.3.2
Adobe Campaign=7.4.1-9383
Adobe Campaign=7.4.2-9390
Adobe Campaign=7.4.2-9391
Adobe Campaign=7.4.3-9394
Adobe Campaign=7.4.3-9396
Adobe Campaign=7.4.3-9397
Adobe Campaign=7.4.3-9398
Adobe Campaign=7.4.3-9399
Adobe Campaign=7.4.4-9400
Any of the following
Linux Linux kernel
Microsoft Windows
Remediation
Event History
Aug 25, 2026
CVE Published
via MITRE·05:27 PM
Data Sourced
via MITRE·05:27 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable with low attack complexity and requires no privileges or user interaction.
2
What could a successful attacker do?
An attacker could execute arbitrary code in the context of the current user. The stated impact includes high confidentiality, integrity, and availability impact, and the scope is changed.