Is CVE-2026-105780 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-105780 being exploited in the wild.

How severe is CVE-2026-105780?

Critical severity, with a CVSS score of 9.9, published 27 October 2026.

Which products and versions are affected?

Adobe Campaign Classic v7: 7.4.4 build 9402 and earlier.

Is there a fix for CVE-2026-105780?

Yes: fixed in Campaign Classic v7: 7.4.4 build 9403. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-105780 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-105780?

Check whether you run Adobe Campaign Classic at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-105780: Adobe Campaign Classic authorization bypass allowing arbitrary code execution

CVE-2026-105780 · Severity: critical · CVSS 9.9 · Published 2026-10-27

Adobe Campaign Classic, an enterprise marketing and customer engagement platform, contains an authorization flaw that allows low-privileged users to execute arbitrary code. An attacker with basic user access could bypass permission controls and run malicious commands on the server, potentially compromising the entire system and its data.

Technologies: Adobe Campaign Classic. Vendors: Adobe.

Quick answers

Is CVE-2026-105780 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-105780 being exploited in the wild.
How severe is CVE-2026-105780?: Critical severity, with a CVSS score of 9.9, published 27 October 2026.
Which products and versions are affected?: Adobe Campaign Classic v7: 7.4.4 build 9402 and earlier.
Is there a fix for CVE-2026-105780?: Yes: fixed in Campaign Classic v7: 7.4.4 build 9403. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-105780 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-105780?: Check whether you run Adobe Campaign Classic at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Campaign Classic v7: 7.4.4 build 9403

Technical details

CVE-2026-105780 is an Incorrect Authorization vulnerability (CWE-863) in Adobe Campaign Classic that permits authenticated attackers with low privileges to execute arbitrary code in the context of the application without user interaction. The vulnerability requires network access and low-privilege authentication but enables complete system compromise due to scope change.

Affected products

Adobe Campaign Classic v7: 7.4.4 build 9402 and earlier

Timeline

2026-10-27: disclosed
2026-10-27: advisory: Adobe Security Bulletin APSB26-162

References

https://www.adobe.com/trust/security/products/campaign/apsb26-162.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.