Adobe Fixes Critical Flaw in Campaign Classic

Adobe has released a security update for its enterprise marketing platform, Campaign Classic, to patch a maximum-severity vulnerability. The flaw, tracked as CVE-2026-48449, carries a score of 10.0 on the CVSS scale. The vulnerability stems from incorrect authorization and could allow arbitrary code execution with the permissions of the current user, without requiring any user interaction. The update also addresses CVE-2026-48448, a high-severity SQL injection flaw with a CVSS score of 8.6 that could enable arbitrary file reads. Somali businesses using Campaign Classic should have their IT administrators apply the update promptly. Because the most serious flaw requires no user interaction, delaying the patch leaves systems exposed to an avoidable risk.

Read our sourcing and corrections policy

Related News

Rails patches critical Active Storage flaw with RCE potential

Read ➔

OctLurk and SilkLurk Target Governments Across Asia

Read ➔

Critical Rails Flaw Could Expose Server Files

Read ➔