CVE-2026-48333

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://helpx.adobe.com/security/products/campaign/apsb26-120.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:adobe:campaign:::::classic:::*
	cpe:2.3:a:adobe:campaign:7.4.3:9394:::classic:::*
	cpe:2.3:a:adobe:campaign:7.4.3:9396:::classic:::*
	cpe:2.3:a:adobe:campaign:7.4.3:9397:::classic:::*
	cpe:2.3:a:adobe:campaign:7.4.3:9398:::classic:::*

OR	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

23 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Adobe Campaign Classic (ACC) está afectado por una vulnerabilidad de autorización incorrecta que podría resultar en escalada de privilegios. Un atacante podría explotar esta vulnerabilidad para obtener privilegios elevados. La explotación de este problema no requiere interacción del usuario.

Information

Published : 2026-08-03 23:16

Updated : 2026-10-23 23:10

NVD link : CVE-2026-48333

Mitre link : CVE-2026-48333

CVE.ORG link : CVE-2026-48333

JSON object : View

Products Affected

linux

linux_kernel

adobe

campaign

microsoft

windows

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2026-48333", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48333", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-04T14:14:34.331610Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@adobe.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@adobe.com", "affectedData": [{"vendor": "Adobe", "product": "Adobe Campaign Classic", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "ACC v7: 7.4.3 build 9398"}, {"status": "unaffected", "version": "ACC v7: 7.4.3 build 9399", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-03T23:16:46.567", "references": [{"url": "https://helpx.adobe.com/security/products/campaign/apsb26-120.html", "tags": ["Vendor Advisory"], "source": "psirt@adobe.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@adobe.com", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction."}, {"lang": "es", "value": "Adobe Campaign Classic (ACC) est\u00e1 afectado por una vulnerabilidad de autorizaci\u00f3n incorrecta que podr\u00eda resultar en escalada de privilegios. Un atacante podr\u00eda explotar esta vulnerabilidad para obtener privilegios elevados. La explotaci\u00f3n de este problema no requiere interacci\u00f3n del usuario."}], "lastModified": "2026-10-23T23:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*", "vulnerable": true, "matchCriteriaId": "7B8DCC6A-0967-4897-94B8-DD22DA5AB841", "versionEndIncluding": "7.4.2"}, {"criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9394:*:*:classic:*:*:*", "vulnerable": true, "matchCriteriaId": "A6BFE9C0-BB34-4769-B94E-14E637695679"}, {"criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9396:*:*:classic:*:*:*", "vulnerable": true, "matchCriteriaId": "E05FE070-A1F8-48B9-A15E-CB87E351E9E0"}, {"criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9397:*:*:classic:*:*:*", "vulnerable": true, "matchCriteriaId": "1BA9BB73-939F-4A0B-B8F5-1942E17F2265"}, {"criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9398:*:*:classic:*:*:*", "vulnerable": true, "matchCriteriaId": "7ADE87F6-3CA4-4E35-A125-23C2FB605A95"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@adobe.com"}