Skip to content
Section C · The archive · Dispatch
← The archive

vulnerability · Sat 01 Aug 2026 · 07:12 UTC

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

Filed UTCSource THN ↗

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system. …

Signals

as the pipeline stamped them
High
Critical vulnerability — CVSS 10
What to do
  1. Critical severity — schedule an urgent patch.

CVE

KEV from CISA · EPSS from FIRST
CVE ids in this dispatch with their KEV status and EPSS score
IdKEVEPSSReference
CVE-2026-48449—0.86%NVD ↗

Get the next one first.

Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.