CVE-2026-75699

Analyzed Analyzed - Analysis Complete

Code Injection Vulnerability in Adobe Campaign Classic

Publication date: 2026-09-22

Last updated on: 2026-09-26

Assigner: Adobe Systems Incorporated

Description

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-26

Generated

2026-10-13

AI Q&A

2026-09-22

EPSS Evaluated

2026-10-11

NVD

CVE-2026-75699

EUVD

EUVD-2026-84658

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	campaign	to 7.4.3 (inc)
adobe	campaign	7.4.4
adobe	campaign	7.4.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

Adobe Campaign Classic has a code injection vulnerability where improper control of code generation allows arbitrary code execution. This means an attacker can run malicious code on the affected system without needing user interaction.

Detection Guidance

Detection of CVE-2026-75699 requires checking for signs of arbitrary code execution or suspicious activity in Adobe Campaign Classic (ACC). Monitor for unexpected system commands, unusual network traffic, or unauthorized file modifications. Review ACC logs for anomalies and ensure all instances are updated to the latest patched version.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on your system with the same privileges as the current user. This could lead to full system compromise, data theft, or further network infiltration.

Compliance Impact

This vulnerability allows arbitrary code execution, which could lead to unauthorized access or data breaches. Such incidents may violate compliance requirements under GDPR (data protection) and HIPAA (health data security) due to potential exposure of sensitive information.

Mitigation Strategies

Apply the latest security patches or updates provided by Adobe for Adobe Campaign Classic immediately. Disable unnecessary services or network access to the vulnerable system until patched. Monitor network traffic for unusual activity or unauthorized code execution attempts.

Hi! I’m here to help you understand CVE-2026-75699. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70