{"id":"CVE-2026-105780","kind":"vulnerability","aliases":["CVE-2026-105780"],"related":[],"title":"Adobe Campaign Classic: authorization flaw lets low-privileged users run code","description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","summary":"Adobe Campaign Classic has an incorrect authorization flaw that lets a low-privileged account execute arbitrary code in the context of the current user. The attack needs no user interaction and changes scope, so the impact can reach beyond the vulnerable component.","severity":"critical","cvss":9.9,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Campaign Classic","fixed":[],"affected":"unknown","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-campaign-classic","authorization","self-hosted","vendor"],"not_affected_if":["adobe-hosted"],"how_to_check":"Check your build in Client Console Help > About. Adobe has not published affected versions for this CVE. Latest security build is 7.4.4 build 9403; compare against it.","fix":"Unknown for this CVE. Adobe recommends the latest ACC v7 security build (7.4.4 build 9403 or later) and restarting nlserver. Adobe has not confirmed it covers this CVE.","status":"open","published_at":"2026-10-27T17:16:56+00:00","first_seen_at":"2026-10-27T17:32:45+00:00","triaged_at":"2026-10-27T17:34:10+00:00","updated_at":"2026-10-27T17:36:12+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-10-27T17:34:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Adobe Campaign Classic: authorization flaw lets low-privileged users run code","impact":"high","summary":"Adobe Campaign Classic has an incorrect authorization flaw that lets a low-privileged account execute arbitrary code in the context of the current user. The attack needs no user interaction and changes scope, so the impact can reach beyond the vulnerable component.","category":"vendor","nicknames":[],"who_cares":["adobe-campaign-classic"],"confidence":0.6,"needs_auth":"yes","worst_case":"Low-privileged attacker runs arbitrary code on the Campaign server","analyst_note":"Check Adobe's security bulletin for affected ACC versions, fixed builds and the required account role; the NVD entry alone gives no versions.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000514,"input_tokens":3333,"output_tokens":362,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Check Adobe's security bulletin for affected ACC versions, fixed builds and the required account role; the NVD entry alone gives no versions.","search":"'-105780':15A,18A '-2026':14A,17A 'acc':77C 'account':45B 'adob':1A,23B,31B,74C 'adobe':19A 'adobe-campaign-class':22B 'affect':79C 'arbitrari':47B,89C,110C 'attack':57B,103C 'author':4A,26B,37B,83C 'beyond':70B 'campaign':2A,20A,24B,32B,75C 'chang':63B,123C 'classic':3A,21A,25B,33B,76C 'code':12A,48B,90C,111C 'compon':73B 'context':51B,94C 'could':86C,104C 'current':54B,97C 'cve':13A,16A 'execut':46B,91C,109C 'exploit':105C,112C 'flaw':5A,38B 'host':29B 'impact':67B 'incorrect':36B,82C 'interact':61B,120C 'issu':115C 'let':6A,40B 'low':8A,43B,101C 'low-privileg':7A,42B,100C 'need':58B 'privileg':9A,44B,102C 'reach':69B 'requir':118C 'result':87C 'run':11A 'scope':64B,121C 'self':28B 'self-host':27B 'user':10A,55B,60B,98C,119C 'vendor':30B 'vulner':72B,84C,107C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T17:16:56+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105780","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105780","severity":null,"published_at":"2026-10-27T17:16:56+00:00","modified_at":"2026-10-27T17:16:56+00:00","first_seen_at":"2026-10-27T17:32:45+00:00","fetched_at":"2026-10-27T17:32:45+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-105780:895","url":null,"severity":null,"published_at":"2026-10-27T17:36:12+00:00","modified_at":"2026-10-27T17:36:12+00:00","first_seen_at":"2026-10-27T17:36:12+00:00","fetched_at":"2026-10-27T17:36:12+00:00","note":"No Adobe bulletin names this CVE (checked Trust Center, helpx campaign list, APSB26-142, ACC release notes). Latest security build is 7.4.4 build 9403 (2026-10-15), but Adobe does not tie it to this CVE. No exploitation reported. Nothing verified; revisit when Adobe publishes the APSB."}],"documents":[{"id":7181,"url":"https://experienceleague.adobe.com/en/docs/campaign-classic/using/release-notes/latest-release","title":"Adobe Campaign Classic v7 release notes (builds 9402, 9403)","kind":"release","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":7180,"url":"https://www.adobe.com/trust/security/products/campaign/apsb26-142.html","title":"APSB26-142 Adobe Campaign Classic (previous bulletin, sibling CVEs)","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}