CVE-2026-104351

LOWCVSS 9.9 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-28: 210-28
Referenced assets2 URLs
Full discourse2 posts
  • Daily CyberSecurity@Daily_CyberSec

    Patch 9 critical Adobe vulnerabilities in Adobe Campaign Classic and Connect, including 9.9 CVSS RCE flaws CVE-2026-104351 and CVE-2026-48360. #Adobe #AdobeCampaign #AdobeConnect #RCE #SQLInjection #Cybersecurity #Vulnerability #InfoSec https://securityonline.info/adobe-vulnerabilities-campaign-classic-connect/

    10000258
    13.1K followersView on X
  • Eliran Emuna@EmunaEliran

    🚨 Adobe Campaign Classic: a CVSS 9.9 code injection flaw ⚠️ CVE-2026-104351: code injection (9.9) ⚠️ CVE-2026-104350: reflected XSS (9.3, needs a click) 📦 Affects 7.4.4 build 9402 and earlier 🛡️ Patch: Adobe APSB26-162 🔗 https://www.adobe.com/trust/security/products/campaign/apsb26-162.html #CyberSecurity #Adobe #CVE https://t.co/T57c13zAin

    0000045
    75 followersView on X

Explore more