EUVD-2026-65618
GHSA-h63f-8gw3-5hc5
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
OS command injection reachable over the network with no interaction yields full CIA impact and a scope change; PR:N follows the vendor rating, though ACC is often authenticated in practice.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Articles & Coverage 2
AnalysisAI
OS command injection in Adobe Campaign Classic (ACC) allows an attacker to execute arbitrary operating-system commands, achieving code execution in the context of the current user with a scope change that extends impact beyond the vulnerable component. Adobe (the reporting vendor) rates this maximum severity CVSS 10.0 (CWE-78), and exploitation requires no user interaction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The concrete prerequisite is network reachability of the Adobe Campaign Classic application component that funnels attacker-influenced input into an OS command; the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no user interaction and, per the vendor rating, no authentication is required against affected default deployments, with scope change (S:C) allowing impact beyond the ACC process. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals point to a genuine top-priority issue rather than a high-CVSS-but-low-real-risk case: the CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H describes network-reachable, low-complexity, unauthenticated exploitation with full confidentiality/integrity/availability loss and a scope change (S:C) - hence the 10.0. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker reaches an ACC application endpoint that passes attacker-controlled input into a server-side OS command and injects shell metacharacters to append their own command, which executes with the privileges of the ACC service/user and, given the scope change, can pivot to affect other components on the host. No user interaction is required, so the attack can be fully automated once the vulnerable endpoint is reachable. … |
| Remediation | Patch available per vendor advisory (Adobe APSB26-134); apply the fixed Adobe Campaign Classic build listed there as the primary remediation, as no exact fix version was included in the provided data and must be taken from the bulletin. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all Adobe Campaign Classic instances and document network exposure and data sensitivity; enable detailed logging for suspicious processes and command execution. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Adobe Campaign Classic
View allArbitrary code execution in Adobe Campaign Classic (ACC) arises from OS command injection (CWE-78), letting an attacker
SQL injection in Adobe Campaign Classic (ACC) lets a remote, unauthenticated attacker inject arbitrary SQL commands that
Remote code execution in Adobe Campaign Classic (ACC) arises from server-side template injection (CWE-1336), where impro
Server-side request forgery in Adobe Campaign Classic (ACC) escalates to arbitrary code execution in the context of the
Server-Side Request Forgery in Adobe Campaign Classic (ACC) enables remote attackers to coerce the server into issuing c
SQL injection in Adobe Campaign Classic (ACC) allows a low-privileged, authenticated attacker to execute arbitrary code
Privilege escalation in Adobe Campaign Classic (ACC) stems from an incorrect authorization flaw (CWE-863) that lets an a
Remote code execution in Adobe Campaign Classic (ACC) lets an authenticated low-privileged attacker inject directives in
Security feature bypass in Adobe Campaign Classic (ACC) exposes sensitive data to unauthenticated remote attackers via a
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today