CVE-2026-76197: Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Remediation
Event History
Frequently Asked Questions
Does exploitation require an authenticated account or user interaction?
No. The vulnerability is rated with no privileges required and no user interaction required, so an unauthenticated attacker could attempt exploitation without relying on a victim action.
How difficult is exploitation expected to be?
The attack vector is network-based and the attack complexity is rated low. This indicates the issue may be reachable remotely and does not depend on unusual preconditions.
What could a successful exploit allow an attacker to do?
A successful exploit could allow arbitrary code execution in the context of the current user. The reported impact includes high confidentiality, integrity, and availability impact, with changed scope.