← Vulnerability database

CVE-2026-105780

Critical
9.9 CVSS v3.1
Published
Oct 27, 2026
Updated
Oct 28, 2026
Vendor
—
Affected versions
—
Weakness
CWE-863

Summary

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Severity

Critical (9.9)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Not listed by the source yet.

Exploitation status

Unknown

Technical details

Technical analysis has not been written for this record yet.

Mitigation & remediation

Follow the vendor advisory linked below for patches and workarounds.

References

Source NIST NVD
Last syncedOct 28, 2026 19:13 UTC
Reviewed Oct 28, 2026
Page updatedOct 28, 2026