CVE-2026-82004

Analyzed Analyzed - Analysis Complete

Improper OS Command Injection in Adobe Campaign Classic

Publication date: 2026-09-08

Last updated on: 2026-09-11

Assigner: Adobe Systems Incorporated

Description

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-11

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-82004

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	campaign	to 7.4.4 (exc)
adobe	campaign	7.4.4
adobe	campaign	7.4.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This is an OS Command Injection vulnerability in Adobe Campaign Classic where improper neutralization of special elements allows attackers to execute arbitrary code without user interaction. The scope is changed, meaning it may affect components beyond the initial user context.

Impact Analysis

An attacker could exploit this to run malicious code on your system with the same privileges as the current user. This could lead to data theft, system compromise, or further network infiltration depending on your environment.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance risks include fines and legal penalties.

Mitigation Strategies

Apply the latest security patches from Adobe for Adobe Campaign Classic immediately. Isolate affected systems if possible and restrict network access to the vulnerable service. Monitor for unusual activity or unauthorized code execution.

Hi! I’m here to help you understand CVE-2026-82004. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70