cyber.hendryadrian.com
Vulnerability & Exploit · thehackernews.com

Adobe Patches Eight Campaign Classic Flaws and Critical Connect Code-Injection Bug

· Original article ↗

Summary

Adobe patched eight critical flaws in Campaign Classic that could enable code execution, security-feature bypass or privilege escalation, plus CVE-2026-48360, a CVSS 9.6 code-injection flaw in Connect. Adobe reports no known in-the-wild exploitation.

Key points

  • Adobe addressed eight vulnerabilities in Campaign Classic.
  • The Campaign Classic flaws affect Windows and Linux versions 7.4.4 build 9402 and earlier; Adobe fixed them in build 9403.
  • Adobe also fixed CVE-2026-48360, a critical code-injection vulnerability in Connect Desktop and Mobile for Windows, macOS and Android.
  • CVE-2026-48360 has a CVSS score of 9.6 and could allow arbitrary code execution.
  • Adobe said it was unaware of in-the-wild exploitation of the addressed issues and advised users to update.

Article Details

Vulnerability Types
  • Code injection
Severity
Critical; CVE-2026-48360 has a CVSS score of 9.6
Affected Versions
  • Adobe Campaign Classic 7.4.4 build 9402 and earlier (Windows and Linux)
Exploitation Status
not_reported
Exploit Availability
unknown
Patch Status
available

CVE

CVE-2026-48360Also resolved by Adobe is a critical code injection flaw in Adobe Connect Desktop and Mobile for Windows, macOS, and Android (CVE-2026-48360, CVSS score: 9.6) that could result in arbitrary code execution.

Vendors

AdobeAdobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation.

Products

Adobe ConnectAlso resolved by Adobe is a critical code injection flaw in Adobe Connect Desktop and Mobile for Windows, macOS, and Android (CVE-2026-48360, CVSS score: 9.6) that could result in arbitrary code execution.Campaign ClassicAdobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation.

Related Articles