Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

Summary: Adobe released patches for eight critical flaws in Campaign Classic affecting versions 7.4.4 build 9402 and earlier on Windows and Linux, patched in build 9403, that could allow arbitrary code execution, security feature bypass, and privilege escalation. Adobe also fixed a critical code injection flaw in Connect Desktop and Mobile for Windows, macOS, and Android, tracked as CVE-2026-48360 with a CVSS score of 9.6, that could result in arbitrary code execution.
Key Takeaway: A CVSS 9.6 code injection flaw in Connect and eight critical Campaign Classic issues carry arbitrary code execution risk, and Adobe states it is not aware of any exploits in the wild - meaning the window to patch before that changes is open now.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-48360
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026