CVE-2026-48333Disclosure(adobe / campaign)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.

adobe CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://helpx.adobe.com/security/products/campaign/apsb26-120.html

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

campaign
linux_kernel
windows

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 1d ago at 2 mentions (2026-08-05); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

adobe linux microsoft

Products

campaignlinux_kernelwindows

2 versions affected across 3 products

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-03	1	Disclosure1
2026-08-05	2	General2
2026-08-06	1	Disclosure1

Full discourse4 posts

Jamie Parfet@JamieParfet43d
Disclosure
Another day, another Adobe security bulletin 🔥 All unauthenticated, exploitable on a stock install: CVE-2026-48323 (RCE) CVE-2026-48331 (SSRF) CVE-2026-48330 (SQLi) CVE-2026-48326 (SQLi) CVE-2026-48333 (Auth bypass > RCE) https://helpx.adobe.com/security/products/campaign/apsb26-120.html
Post summary
Adobe announces a security bulletin disclosing several unauthenticated vulnerabilities—including RCE, SSRF, SQLi, and auth bypass—that can be exploited on a stock installation.
00020212
389 followersView on X
CERT-PY@CERTpy44d
General
⚠️ Vulnerabilidad crítica en Adobe ❗ CVE-2026-48333 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-critica-en-adobe-campaign-classic-acc/ https://t.co/rP6uEWWdo5
Post summary
A brief alert about a critical Adobe vulnerability (CVE-2026-48333) is posted with a link to a CERT page, but the text provides no further details on the flaw or its exploitation.
00000211
6.7K followersView on X
kawn@kawn202045d
General
#securityupdate #adobeupdate #adobe #CampaignClassic Adobe Campaign Classic ACC v7 7.4.3 build 9399 ・CVE-2026-48323（CVSS 10.0）・CVE-2026-48330（〃 10.0）・CVE-2026-48331（〃 10.0）・CVE-2026-48317 ・CVE-2026-48326（〃　9.9）・CVE-2026-48333（〃　9.8）・CVE-2026-48399
Post summary
The post enumerates several high‑severity CVEs for Adobe Campaign Classic but provides no PoC, exploit, active‑exploitation evidence, or explicit patch information.
0000068
92 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-48333 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnera… https://www.cve.org/CVERecord?id=CVE-2026-48333
Post summary
An Incorrect Authorization flaw in Adobe Campaign Classic (ACC) could allow privilege escalation, yet no PoC, exploit tool, patch, or evidence of active exploitation is mentioned.
00000778
57.9K followersView on X

CPE platform detail7 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

7 of 7 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	adobe	campaign	-	-	-
App	adobe	campaign	7.4.3	-	-
App	adobe	campaign	7.4.3	-	-
App	adobe	campaign	7.4.3	-	-
App	adobe	campaign	7.4.3	-	-
OS	linux	linux_kernel	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard adobe CVEs linux CVEs microsoft CVEs campaign vulnerabilities

What researchers are saying

CVE-2026-48333

Jamie Parfet@JamieParfetDisclosure

Adobe announces a security bulletin disclosing several unauthenticated vulnerabilities—including RCE, SSRF, SQLi, and auth bypass—that can be exploited on a stock installation.

CERT-PY@CERTpyGeneral

A brief alert about a critical Adobe vulnerability (CVE-2026-48333) is posted with a link to a CERT page, but the text provides no further details on the flaw or its exploitation.

kawn@kawn2020General

The post enumerates several high‑severity CVEs for Adobe Campaign Classic but provides no PoC, exploit, active‑exploitation evidence, or explicit patch information.

CVE@CVEnewDisclosure

An Incorrect Authorization flaw in Adobe Campaign Classic (ACC) could allow privilege escalation, yet no PoC, exploit tool, patch, or evidence of active exploitation is mentioned.