CVE-2026-48399
Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.46%
- CWE
- CWE-657
- Published
- 2026-08-03
- Last modified
- 2026-08-28
Affected products
- Adobe Adobe Campaign Classic
- Adobe Adobe Campaign Classic
Weakness type
Related vulnerabilities
- CVE-2026-39888 — PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
- CVE-2026-30792 — RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings
- CVE-2025-54255 — Acrobat Reader | Violation of Secure Design Principles (CWE-657)
- CVE-2025-24887 — OpenCTI bypass of protected attribute update
- CVE-2024-57957 — Vulnerability of improper log information control in the UI framework module...
- CVE-2024-26139 — OpenCTI Authenticated Privilege Escalation
- CVE-2023-29320 — ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw
- CVE-2022-30683 — AEM Violation of Secure Design Principles Security feature bypass