Critical severity10.0NVD Advisory· Published Aug 11, 2026· Updated Aug 28, 2026
CVE-2026-71398
CVE-2026-71398
Description
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected products
1Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/campaign/apsb26-123.htmlnvdVendor Advisory
News mentions
4- ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and MoreThe Hacker News · Aug 17, 2026
- Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic FlawsThe Hacker News · Aug 12, 2026
- Adobe: 25 Vulnerabilities Across Multiple Products Disclosed in Single BatchVypr Intelligence · Aug 11, 2026
- Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic FlawsSecurityWeek · Aug 11, 2026