CVE-20XX-?

Adobe Campaign CVEs.

Published CVEs affecting Adobe Campaign, ranked by exploit odds.

36 CVEs · updated 2026-11-06 03:49 UTC

  1. CVE-2026-76195

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 4% exploit odds Fix listed
  2. CVE-2026-76197

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 4% exploit odds Fix listed
  3. CVE-2026-82004

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 3% exploit odds Fix listed
  4. CVE-2026-48323

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  5. CVE-2026-76193

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Disclosure Server Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  6. CVE-2026-73369

    Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  7. CVE-2026-75699

    Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  8. CVE-2026-75703

    Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  9. CVE-2026-75721

    Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  10. CVE-2026-84412

    Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  11. CVE-2026-89275

    Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  12. CVE-2026-27302

    Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Auth & access Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  13. CVE-2026-71398

    Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Auth & access Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  14. CVE-2026-75723

    Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Auth & access Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  15. CVE-2026-48286

    Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

    Auth & access Web app Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  16. CVE-2026-75728

    Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.

    Auth & access Adobe Campaign

    9.1 CRITICAL 1% exploit odds Fix listed
  17. CVE-2026-48330

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the application. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    10.0 CRITICAL 1% exploit odds Fix listed
  18. CVE-2026-82009

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary SQL commands. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    9.1 CRITICAL 1.0% exploit odds Fix listed
  19. CVE-2026-48326

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    9.9 CRITICAL 1.0% exploit odds Fix listed
  20. CVE-2026-48331

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

    Disclosure Server Adobe Campaign

    10.0 CRITICAL 0.9% exploit odds Fix listed
  21. CVE-2026-48333

    Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.

    Auth & access Adobe Campaign

    9.8 CRITICAL 0.9% exploit odds Fix listed
  22. CVE-2026-48317

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Code execution Adobe Campaign

    9.6 CRITICAL 0.9% exploit odds Fix listed
  23. CVE-2026-48399

    Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.

    Other Adobe Campaign

    7.5 HIGH 0.9% exploit odds Fix listed
  24. CVE-2026-48449

    Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

    Auth & access Adobe Campaign

    10.0 CRITICAL 0.9% exploit odds Fix listed
  25. CVE-2026-82013

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

    Disclosure Server Adobe Campaign

    9.9 CRITICAL 0.8% exploit odds Fix listed
  26. CVE-2026-82443

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

    Disclosure Server Adobe Campaign

    9.6 CRITICAL 0.8% exploit odds Fix listed
  27. CVE-2026-48381

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    9.0 CRITICAL 0.8% exploit odds Fix listed
  28. CVE-2026-83660

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

    Disclosure Server Adobe Campaign

    9.9 CRITICAL 0.8% exploit odds Fix listed
  29. CVE-2026-48448

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    8.6 HIGH 0.6% exploit odds Fix listed
  30. CVE-2026-82011

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    9.1 CRITICAL 0.6% exploit odds Fix listed
  31. CVE-2026-48303

    Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

    Auth & access Adobe Campaign

    10.0 CRITICAL 0.6% exploit odds Fix listed
  32. CVE-2026-82008

    Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Code execution Adobe Campaign

    9.9 CRITICAL 0.5% exploit odds Fix listed
  33. CVE-2026-89276

    Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    9.9 CRITICAL 0.5% exploit odds Fix listed
  34. CVE-2026-82003

    Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

    Code execution Adobe Campaign

    8.5 HIGH 0.5% exploit odds Fix listed
  35. CVE-2026-47938

    Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

    Disclosure Server Adobe Campaign

    10.0 CRITICAL 0.4% exploit odds Fix listed
  36. CVE-2026-82010

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

    Injection Adobe Campaign

    9.9 CRITICAL 0.4% exploit odds Fix listed

All CVEs affecting Adobe Campaign that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.