EUVD-2026-35838
GHSA-gx58-v339-c87j
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Articles & Coverage 2
AnalysisAI
Remote code execution in Adobe Campaign Classic (ACC) version 7.4.3 build 9394 and earlier allows unauthenticated network attackers to execute arbitrary code in the context of the current user with no user interaction required. The flaw stems from an Incorrect Authorization weakness (CWE-863) and carries the maximum CVSS 3.1 base score of 10.0 with changed scope, indicating impact beyond the vulnerable component. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions - remote unauthenticated exploitation against default configurations of Adobe Campaign Classic 7.4.3 build 9394 or earlier. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | All available signals point to maximum severity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker on the internet identifies an exposed Adobe Campaign Classic 7.4.3 instance (commonly discoverable via the /nl/jsp/ or /r/ tracking endpoints), sends a single crafted request to a code-execution sink that is protected by the flawed authorization check, and bypasses the check to invoke server-side script execution. Because the scope is changed and the result is code execution in the current user context, the attacker pivots from the web tier to the campaign delivery infrastructure to exfiltrate marketing customer databases or stage further intrusion. … |
| Remediation | Apply the Adobe-released patch documented in security bulletin APSB26-66 (https://helpx.adobe.com/security/products/campaign/apsb26-66.html), which addresses ACC 7.4.3 build 9394 and earlier - administrators should upgrade to the fixed build identified in that advisory (exact post-patch build number not enumerated in the input data and should be read from Adobe's bulletin). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
24 hours: Identify and inventory all Adobe Campaign Classic deployments; confirm running build versions and assess network exposure (direct Internet access vs. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today