CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-104351 — Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of...

·Source: NIST NVD

Updated:

Executive Summary

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Analysis

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. CVSS Score: 9.9. Published: 2026-10-27T17:16:55.593.

Indicators of Compromise (1)

CVE (1)
CVE-2026-104351
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 27, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitrary code execution.

CVE-2026-104351
The Hacker News
MEDIUMVulnerabilityNEW

Student SSNs and Medicaid IDs Exposed in Frontline School Software Breach

Kalleigh Lane reports: If your school district used Frontline Central or School Health Management, your Social Security number, date of birth, or government ID could have been caught up in a cybersecurity incident. That risk applies to some adults and minors whose information was processed through those products. Frontline Education announced Oct. 26, 2026, that...

DataBreaches.net
MEDIUMVulnerabilityNEW

GM settles with 36 states for selling driver data, agrees to $220 million fine and reforms

General Motors agreed to pay $220 million to settle a lawsuit filed by a coalition of 36 state attorneys general who alleged the company unlawfully sold information about driver behavior to outside parties.

The Record