PT-2026-33534 · Adobe · Campaign Classic+2
CVE-2026-27302
·
Published
2026-04-14
·
Updated
2026-08-11
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Adobe Campaign Classic (ACC) (affected versions not specified)
Adobe Connect (affected versions not specified)
Adobe Connect Desktop Application (affected versions not specified)
Description
Adobe Campaign Classic (ACC) contains an incorrect authorization issue that allows an attacker to execute arbitrary code within the context of the current user without requiring user interaction. Additionally, Adobe Connect and Adobe Connect Desktop Application are affected by a deserialization flaw, which is a process where data is converted back into an object, potentially allowing a remote attacker to execute arbitrary code.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Incorrect Authorization
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Campaign Classic
Connect
Connect Desktop Application