VulnSocial

CVE-2026-27302Patch

LOW

Exploit discussion active in current signal (6 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

Back to dashboard
2.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 8 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 5 signals
  • Technical details provided in 7 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked at 6 mentions on most recent observed day (2026-08-12)
  • 8 total mentions across 3 days

Deep dive

Activity timeline8 mentions / 3d
02356Mentions · 2026-04-14: 1Mentions · 2026-08-11: 1Mentions · 2026-08-12: 6PoC Mentioned / Linked · 2026-08-12: 1Patch / Workaround · 2026-04-14: 1Patch / Workaround · 2026-08-11: 1Patch / Workaround · 2026-08-12: 3Technical Details · 2026-04-14: 1Technical Details · 2026-08-11: 1Technical Details · 2026-08-12: 504-1408-1108-12
Signal classification4 categories
Patch
450.0%
Disclosure
225.0%
General
112.5%
PoC
112.5%
Referenced assets11 URLs
Classification over time
DateTotalLabels
2026-04-141
Disclosure1
2026-08-111
Patch1
2026-08-126
Disclosure1General1Patch3PoC1
Full discourse8 posts
  • にゃん☆たく/takumi.a@taku888infinity
    Disclosure

    ぱっちちゅーずでー ◆ Microsoft 2026 年 4 月のセキュリティ更新プログラム (月例) https://www.microsoft.com/en-us/msrc/blog/2026/04/202604-security-update CVE-2026-33825 Microsoft Defender の特権の昇格の脆弱性 CVE-2026-32201 Microsoft SharePoint Server のなりすましの脆弱性 ◆Fortinet https://fortiguard.fortinet.com/psirt ・FG-IR-26-100 / CVE-2026-39808 FortiSandbox 4.4系のAPIにある OSコマンドインジェクション。細工したリクエストを受けると、認証なしで任意コードや任意コマンドを実行される恐れがあります。外部公開や到達可能性がある環境では、優先度高めでの確認が必要です。 ・FG-IR-26-112 / CVE-2026-39813 FortiSandbox のJRPC APIにある パストラバーサル起因の認証回避・権限昇格。特別に細工したHTTPリクエストで未認証のまま認証をバイパスし、権限を引き上げられる可能性があるため、管理API露出環境では特に注意が必要です。 ・FG-IR-26-121 / CVE-2026-22828 FortiAnalyzer Cloud / FortiManager Cloud の oftpd にある ヒープベースのバッファオーバーフロー。細工したリクエストにより、リモートの未認証攻撃者が任意コードやコマンド実行に至る可能性がありますが、悪用にはASLRや分離構成を踏まえた準備が必要です。 ◆Ivanti https://www.ivanti.com/blog/april-2026-security-update https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2026-4913-CVE-2026-4… ◆Adobe（Criticalで任意のコード実行のみ抽出） https://helpx.adobe.com/security.html ・Adobe ColdFusion（APSB26-38） CVE-2026-27304, CVE-2026-27306 入力検証不備により、任意のコード実行につながる脆弱性 ・Adobe Connect（APSB26-37） CVE: CVE-2026-27302, CVE-2026-27303, CVE-2026-27243, CVE-2026-27245, CVE-2026-27246, CVE-2026-34615 デシリアライズ不備や XSS を起点に、任意のコード実行が可能となる脆弱性 ・Adobe FrameMaker（APSB26-36） CVE: CVE-2026-27290, CVE-2026-27292, CVE-2026-27293, CVE-2026-27294, CVE-2026-27295, CVE-2026-27296, CVE-2026-27297, CVE-2026-27298 任意のコード実行につながる脆弱性群 ・Adobe Bridge（APSB26-39） CVE: CVE-2026-34630, CVE-2026-27310, CVE-2026-27311, CVE-2026-27312, CVE-2026-27313 複数のヒープベース・バッファオーバーフローにより、任意のコード実行が可能になる脆弱性 ・Adobe Photoshop（APSB26-40） CVE: CVE-2026-27289 境界外読み取りにより、任意のコード実行につながる脆弱性 ・Adobe Illustrator（APSB26-42） CVE: CVE-2026-34618 境界外書き込みにより、任意のコード実行につながる脆弱性 ◆SAP SAP Security Patch Day - April 2026 https://support.sap.com/en/my-support/knowledge-base/security-notes-news/april-2026.html CVE-2026-27681 https://www.cve.org/CVERecord?id=CVE-2026-27681 『（直訳）SAP Business Planning and ConsolidationおよびSAP Business Warehouseにおける認証チェックの不備により、認証済みのユーザーが細工されたSQL文を実行してデータベースデータを読み取り、変更、削除できる脆弱性が存在します。これは、システムの機密性、完全性、可用性に重大な影響を及ぼします。』

    Post summary

    The text compiles a quarterly list of newly disclosed CVEs from Microsoft, Fortinet, Ivanti, Adobe, and SAP, providing technical details and links to vendor patch pages.

    000321.4K
    11.7K followersView on X
  • ExploitGrid@exploitgrid
    PoC

    [CVE] CVE-2026-27302 [HIGH PRIORITY] #Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) 🔗 https://exploitgrid.net/cve/CVE-2026-27302

    Post summary

    CVE‑2026‑27302 is an Adobe Campaign Classic incorrect authorization flaw marked as high priority, with a Proof of Concept available via exploitgrid; no evidence of active exploitation or patch status is mentioned.

    1000038
    30 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-17061 CVE-2026-27302 CVE-2026-45618 CVE-2026-48056 CVE-2026-48362 ..🧵👇

    Post summary

    The post lists several CVE identifiers as top vulnerabilities for the day but provides no details regarding proofs of concept, exploitation activity, or mitigation information.

    1000052
    30 followersView on X
  • TECHEPAGES@techepages
    Patch

    Adobe has released patches for 50+ vulnerabilities, including critical flaws in ColdFusion (CVE-2026-48362, CVE-2026-48273, CVE-2026-71384) and Campaign Classic (CVE-2026-71398, CVE-2026-27302, CVE-2026-48381). These issues could enable arbitrary code execution or DoS. Commerce updates also address privilege escalation (CVE-2026-71362). With Priority 1 ratings, immediate patching is strongly advised.

    Post summary

    Adobe has issued patches for a suite of 50+ high‑severity CVEs affecting ColdFusion and Campaign Classic, with immediate remediation strongly advised.

    0001060
    38 followersView on X
  • ThreatAft@ThreatAft
    Disclosure

    🚨 Adobe Campaign Classic — TWO CVSS 10.0 CVEs CVE-2026-27302 (Aug): Incorrect Auth → RCE CVE-2026-71398 (Jul): Incorrect Auth → RCE → http://threataft.com/articles/adobe-campaign-classic-two-cvss-10-cves #cybersecurity #infosec #Adobe #CampaignClassic #CVSS10 #ThreatIntel

    Post summary

    The text announces two new Adobe Campaign Classic CVEs with CVSS 10, both involving incorrect authentication leading to remote code execution.

    0000042
    36 followersView on X
  • kawn@kawn2020
    Patch

    #securityupdate #adobeupdate #adobe #CampaignClassic Adobe から，Campaign Classic で更新をリリース． 適用優先度「1」，緊急度には「Critical」 3 件（うち CVSS 10.0 2 件）が含まれる． ・CVE-2026-27302（CVSS 10.0） ・CVE-2026-71398（ 〃 ） ・CVE-2026-48381 https://x.com/kawn2020/status/2087451212627255511

    Post summary

    Adobe has released a critical update for Campaign Classic, addressing CVE‑2026‑27302, CVE‑2026‑71398, and CVE‑2026‑48381, with two of the vulnerabilities having a CVSS score of 10.0.

    0000047
    90 followersView on X
  • CyberSignal | Cybersecurity News@XQOPTRX
    Patch

    🔥 Adobe patches multiple CVSS 10.0 vulnerabilities Adobe released fixes for 50+ vulnerabilities across its products. Among the most severe: 🔴 ColdFusion CVE-2026-48362 — CVSS 10.0 🔴 Campaign Classic CVE-2026-71398 — CVSS 10.0 🔴 Campaign Classic CVE-2026-27302 — CVSS 10.0 Potential impact includes arbitrary code execution and denial of service. 📅 August 11, 2026 🔎 Source: Adobe / SecurityWeek. #Adobe #ColdFusion #CVE #CyberSecurity #PatchNow

    Post summary

    Adobe announced patches for more than 50 severe vulnerabilities—including CVE-2026-48362, CVE-2026-71398, and CVE-2026-27302—all rated CVSS 10.0, with potential for arbitrary code execution and denial of service, and no evidence of active exploitation or PoC was provided.

    0000038
    42 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    📨 Adobe Campaign Classic CVE-2026-27302 is rated CVSS 10 critical. An Incorrect Authorization flaw can lead to arbitrary code execution. ACC users need to patch immediately. #cybersecurity #ciso #cto #Adobe #vulnerabilities #mssp https://secalerts.co/vulnerability/CVE-2026-27302?utm_campaign=x https://t.co/C7KwXcvazj

    Post summary

    Adobe Campaign Classic possesses a critical authorization flaw (CVE‑2026‑27302) that could permit arbitrary code execution; users are urged to apply patches immediately to mitigate the high‑risk issue.

    00000225
    877 followersView on X

Explore more

Back to dashboard