PT-2026-33534 · Adobe · Campaign Classic+2

CVE-2026-27302

·

Published

2026-04-14

·

Updated

2026-08-11

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic (ACC) (affected versions not specified) Adobe Connect (affected versions not specified) Adobe Connect Desktop Application (affected versions not specified)
Description Adobe Campaign Classic (ACC) contains an incorrect authorization issue that allows an attacker to execute arbitrary code within the context of the current user without requiring user interaction. Additionally, Adobe Connect and Adobe Connect Desktop Application are affected by a deserialization flaw, which is a process where data is converted back into an object, potentially allowing a remote attacker to execute arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-05387
CVE-2026-27302

Affected Products

Campaign Classic
Connect
Connect Desktop Application