CVE-2026-75728

Analyzed Analyzed - Analysis Complete

Incorrect Authorization in Adobe Campaign Classic Leads to Code Execution

Publication date: 2026-09-22

Last updated on: 2026-09-24

Assigner: Adobe Systems Incorporated

Description

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-24

Generated

2026-10-13

AI Q&A

2026-09-22

EPSS Evaluated

2026-10-11

NVD

CVE-2026-75728

EUVD

EUVD-2026-84652

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	campaign	to 7.4.3 (inc)
adobe	campaign	7.4.4
adobe	campaign	7.4.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

Adobe Campaign Classic (ACC) has an Incorrect Authorization vulnerability that allows arbitrary code execution in the context of the current user. An attacker could exploit this to run malicious code without requiring any user interaction.

Detection Guidance

Detection of CVE-2026-75728 requires checking for unauthorized code execution attempts in Adobe Campaign Classic. Monitor logs for unusual activity, especially commands or scripts running with elevated privileges. Verify user permissions and access controls in the ACC application. No specific commands are provided in the available context.

Impact Analysis

This vulnerability could allow attackers to execute arbitrary code on your system, potentially leading to data breaches, system compromise, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations, potentially resulting in legal penalties or reputational damage.

Mitigation Strategies

Apply the latest security patches or updates provided by Adobe for Adobe Campaign Classic. Ensure proper access controls are in place to restrict unauthorized code execution. Monitor network traffic for unusual activity that may indicate exploitation attempts.

Hi! I’m here to help you understand CVE-2026-75728. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70