Advisories · Technology

Adobe Campaign Classic.

Every CVE that names Adobe Campaign Classic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-104353 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- Adobe Campaign Classic
- Command injection
Not analysed yet 27 Oct 2026
CVE-2026-105780 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- Adobe Campaign Classic
- Broken access control
Not analysed yet 27 Oct 2026
CVE-2026-105489 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 27 Oct 2026
CVE-2026-104350 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Campaign Classic
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2026
CVE-2026-105781 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 27 Oct 2026
CVE-2026-104351 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Campaign Classic
- Code injection
Not analysed yet 27 Oct 2026
CVE-2026-104354 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 27 Oct 2026
CVE-2026-105779 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 27 Oct 2026
CVE-2026-75703 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Campaign Classic
- Code injection
Not analysed yet 22 Sept 2026
CVE-2026-84412 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Campaign Classic
- Code injection
Not analysed yet 22 Sept 2026
CVE-2026-89276 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Campaign Classic
- Code injection
Not analysed yet 22 Sept 2026
CVE-2026-83660 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Campaign Classic
- Server-side request forgery (SSRF)
Not analysed yet 22 Sept 2026
CVE-2026-82013 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Campaign Classic
- Server-side request forgery (SSRF)
Not analysed yet 22 Sept 2026
CVE-2026-82003 CVE record

CVSS 8.5 High

Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)
- Adobe Campaign Classic
- CWE-20
Not analysed yet 22 Sept 2026
CVE-2026-82009 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 22 Sept 2026
CVE-2026-75721 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Campaign Classic
- Code injection
Not analysed yet 22 Sept 2026
CVE-2026-75723 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- Adobe Campaign Classic
- Broken access control
Not analysed yet 22 Sept 2026
CVE-2026-75699 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Campaign Classic
- Code injection
Not analysed yet 22 Sept 2026
CVE-2026-73369 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Campaign Classic
- Code injection
Not analysed yet 22 Sept 2026
CVE-2026-82011 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 22 Sept 2026
CVE-2026-82443 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Campaign Classic
- Server-side request forgery (SSRF)
Not analysed yet 22 Sept 2026
CVE-2026-82008 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)
- Adobe Campaign Classic
- CWE-20
Not analysed yet 22 Sept 2026
CVE-2026-89275 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Campaign Classic
- Code injection
Not analysed yet 22 Sept 2026
CVE-2026-75728 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- Adobe Campaign Classic
- Broken access control
Not analysed yet 22 Sept 2026
CVE-2026-82010 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 22 Sept 2026
CVE-2026-82004 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- Adobe Campaign Classic
- Command injection
Not analysed yet 8 Sept 2026
CVE-2026-76195 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- Adobe Campaign Classic
- Command injection
Not analysed yet 25 Aug 2026
CVE-2026-76197 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- Adobe Campaign Classic
- Command injection
Not analysed yet 25 Aug 2026
CVE-2026-76193 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Campaign Classic
- Server-side request forgery (SSRF)
Not analysed yet 25 Aug 2026
CVE-2026-48381 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 11 Aug 2026
CVE-2026-71398 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- Adobe Campaign Classic
- Broken access control
Not analysed yet 11 Aug 2026
CVE-2026-27302 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- Adobe Campaign Classic
- Broken access control
Not analysed yet 11 Aug 2026
CVE-2026-48323 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
- Adobe Campaign Classic
- Code injection
Not analysed yet 3 Aug 2026
CVE-2026-48333 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- Adobe Campaign Classic
- Broken access control
Not analysed yet 3 Aug 2026
CVE-2026-48317 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
- Adobe Campaign Classic
- Code injection
Not analysed yet 3 Aug 2026
CVE-2026-48331 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Campaign Classic
- Server-side request forgery (SSRF)
Not analysed yet 3 Aug 2026
CVE-2026-48330 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 3 Aug 2026
CVE-2026-48399 CVE record

CVSS 7.5 High

Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)
- Adobe Campaign Classic
- CWE-657
Not analysed yet 3 Aug 2026
CVE-2026-48326 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 3 Aug 2026
CVE-2026-48449 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- Adobe Campaign Classic
- Broken access control
Not analysed yet 30 Jul 2026
CVE-2026-48448 CVE record

CVSS 8.6 High

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
Not analysed yet 30 Jul 2026
CVE-2026-48286 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- Adobe Campaign Classic
- Broken access control
Not analysed yet 30 Jun 2026
CVE-2026-47938 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Campaign Classic
- Server-side request forgery (SSRF)
Not analysed yet 9 Jun 2026
CVE-2026-48303 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- Adobe Campaign Classic
- Broken access control
Not analysed yet 9 Jun 2026
CVE-2020-9666 CVE record

Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability.
- Adobe Campaign Classic
Not analysed yet 25 Jun 2020