EUVD-2026-65619
GHSA-rjhq-q858-qc66
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Mirrors vendor vector: network-reachable, low-complexity OS command injection yielding host-level RCE with full CIA impact and scope change; PR:N retained per vendor but flagged as unverified.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Articles & Coverage 2
AnalysisAI
Arbitrary code execution in Adobe Campaign Classic (ACC) arises from OS command injection (CWE-78), letting an attacker run arbitrary commands in the context of the running user. The flaw is rated CVSS 10.0 with a network attack vector, no privileges, no user interaction, and a scope change reaching the underlying host. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Per the CVSS vector the vulnerability is remotely reachable (AV:N), low-complexity (AC:L), and requires no user interaction (UI:N) and no privileges (PR:N), implying unauthenticated network exploitation against a reachable Adobe Campaign Classic server. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are strong but partially unconfirmed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker reaches the network-exposed Adobe Campaign Classic endpoint and submits a request whose field carries embedded shell metacharacters that ACC passes into an OS command, causing the injected commands to run in the context of the ACC service account. Because scope is changed, the attacker pivots from the application into the host operating system to install tooling or move laterally. … |
| Remediation | Apply the vendor fix per Adobe advisory APSB26-134 as the primary remediation; exact fixed version numbers were not included in the provided data, so obtain them from the public advisory at helpx.adobe.com/security/products/campaign/apsb26-134.html rather than the internal-corp link supplied. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit all Adobe Campaign Classic deployments in your environment, document versions and network exposure, and identify which instances are internet-facing or accessible from untrusted networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Adobe Campaign Classic
View allOS command injection in Adobe Campaign Classic (ACC) allows an attacker to execute arbitrary operating-system commands,
SQL injection in Adobe Campaign Classic (ACC) lets a remote, unauthenticated attacker inject arbitrary SQL commands that
Remote code execution in Adobe Campaign Classic (ACC) arises from server-side template injection (CWE-1336), where impro
Server-side request forgery in Adobe Campaign Classic (ACC) escalates to arbitrary code execution in the context of the
Server-Side Request Forgery in Adobe Campaign Classic (ACC) enables remote attackers to coerce the server into issuing c
SQL injection in Adobe Campaign Classic (ACC) allows a low-privileged, authenticated attacker to execute arbitrary code
Privilege escalation in Adobe Campaign Classic (ACC) stems from an incorrect authorization flaw (CWE-863) that lets an a
Remote code execution in Adobe Campaign Classic (ACC) lets an authenticated low-privileged attacker inject directives in
Security feature bypass in Adobe Campaign Classic (ACC) exposes sensitive data to unauthenticated remote attackers via a
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today