CVE-2026-48323

Received Received - Intake

Improper Template Engine Neutralization in Adobe Campaign Classic

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: Adobe Systems Incorporated

Description

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-03

Generated

2026-08-04

AI Q&A

2026-08-04

EPSS Evaluated

N/A

NVD

CVE-2026-48323

EUVD

EUVD-2026-52519

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	campaign_classic	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1336	The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.

Attack-Flow Graph

Executive Summary

Adobe Campaign Classic has an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. This flaw allows an attacker to execute arbitrary code on the affected system with the privileges of the current user. Exploitation does not require any user interaction and the attack scope is changed.

Impact Analysis

This vulnerability could allow an attacker to run malicious code on your system, potentially leading to data theft, system compromise, or unauthorized access. Since exploitation requires no user interaction, systems exposed to the internet are at higher risk.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Compliance failures may result in legal penalties or reputational damage.

Mitigation Strategies

Apply the latest security patches from Adobe for Adobe Campaign Classic immediately. Isolate affected systems if possible and restrict network access to the vulnerable service. Monitor for unusual activity or unauthorized code execution attempts.

Hi! I’m here to help you understand CVE-2026-48323. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70