Critical Vulnerabilities Disclosed in Adobe Campaign Classic Require Immediate Patching
Adobe has released a security advisory detailing two high-risk vulnerabilities affecting Adobe Campaign Classic on-premises deployments on Windows and Linux. CVE-2026-48449 is an improper authorization flaw that permits remote attackers to execute arbitrary code without authentication and carries a maximum CVSSv3.1 base score of 10.0. CVE-2026-48448 is a SQL injection vulnerability that allows unauthenticated attackers to read arbitrary files from the file system, rated at 8.6. Both issues affect the campaign management platform used by organizations for marketing automation. Adobe urges administrators to apply the available security updates without delay due to the elevated risk of exploitation.
Security NEXTJul 31, 2026Translated from Japanese