Reported by 2 outlets
Adobe Campaign Classic CVSS 10.0 RCE (CVE-2026-48449) — Patched in APSB26-114
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 4.90 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Adobe Campaign Classic CVSS 10.0 RCE (CVE-2026-48449) — Patched in APSB26-114
thehackernews.com · 71d ago · August 4th, 2026
Missed by today's feeds; surfaced via external CVE monitoring.
Adobe patched CVE-2026-48449, a CVSS 10.0 incorrect-authorization flaw in Adobe Campaign Classic that could allow unauthenticated remote code execution without user interaction, in bulletin APSB26-114 (also covering an arbitrary file-system read issue). Adobe reports no known in-the-wild exploitation. Campaign Classic is a marketing/customer-journey platform with frequent privileged integrations (SFTP, databases, cloud storage) — orgs running it on-premises should apply the update and treat the platform as a high-value target given its data-access profile.
-
mentioned by securityweek.com
Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws
securityweek.com · 63d ago · August 11th, 2026