{"schema_version":1,"title":"Adobe Campaign Classic vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 29 vulnerabilities in Adobe Campaign Classic: 17 in the last 7 days and 27 in the last 90 days, 27 of them critical and 0 exploited in the wild. The most recent, CVE-2026-89276, was published on 22 September 2026.","url":"https://junglewise.ai/threats/technologies/campaign-classic","json_url":"https://junglewise.ai/threats/technologies/campaign-classic.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/campaign-classic","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":29,"critical":27,"exploited":0,"last_7_days":17,"last_30_days":18,"last_90_days":27,"last_365_days":29},"latest":[{"cve":"CVE-2026-89276","cvss":9.9,"epss":0.0053,"slug":"cve-2026-89276-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.55+00:00","url":"https://junglewise.ai/threats/cve-2026-89276-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-89275","cvss":10,"epss":0.0125,"slug":"cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.407+00:00","url":"https://junglewise.ai/threats/cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-84412","cvss":10,"epss":0.0125,"slug":"cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.923+00:00","url":"https://junglewise.ai/threats/cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-83660","cvss":9.9,"epss":0.0034,"slug":"cve-2026-83660-adobe-campaign-classic-acc-is-affected-by-a-server-side-request","title":"Adobe Campaign Classic server-side request forgery","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.673+00:00","url":"https://junglewise.ai/threats/cve-2026-83660-adobe-campaign-classic-acc-is-affected-by-a-server-side-request"},{"cve":"CVE-2026-82443","cvss":9.6,"epss":0.0035,"slug":"cve-2026-82443-adobe-campaign-classic-acc-is-affected-by-a-server-side-request","title":"Adobe Campaign Classic server-side request forgery privilege escalation","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.79+00:00","url":"https://junglewise.ai/threats/cve-2026-82443-adobe-campaign-classic-acc-is-affected-by-a-server-side-request"},{"cve":"CVE-2026-82013","cvss":9.9,"epss":0.0082,"slug":"cve-2026-82013-adobe-campaign-classic-acc-is-affected-by-a-server-side-request","title":"Adobe Campaign Classic Server-Side Request Forgery privilege escalation","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.657+00:00","url":"https://junglewise.ai/threats/cve-2026-82013-adobe-campaign-classic-acc-is-affected-by-a-server-side-request"},{"cve":"CVE-2026-82011","cvss":9.1,"epss":0.0055,"slug":"cve-2026-82011-adobe-campaign-classic-acc-is-affected-by-an-improper","title":"Adobe Campaign Classic SQL injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.523+00:00","url":"https://junglewise.ai/threats/cve-2026-82011-adobe-campaign-classic-acc-is-affected-by-an-improper"},{"cve":"CVE-2026-82010","cvss":9.9,"epss":0.0097,"slug":"cve-2026-82010-adobe-campaign-classic-acc-is-affected-by-an-improper","title":"Adobe Campaign Classic SQL injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.377+00:00","url":"https://junglewise.ai/threats/cve-2026-82010-adobe-campaign-classic-acc-is-affected-by-an-improper"},{"cve":"CVE-2026-82009","cvss":9.1,"epss":0.0099,"slug":"cve-2026-82009-adobe-campaign-classic-acc-is-affected-by-an-improper","title":"Adobe Campaign Classic SQL injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.22+00:00","url":"https://junglewise.ai/threats/cve-2026-82009-adobe-campaign-classic-acc-is-affected-by-an-improper"},{"cve":"CVE-2026-82008","cvss":9.9,"epss":0.0053,"slug":"cve-2026-82008-adobe-campaign-classic-acc-is-affected-by-an-improper-input","title":"Adobe Campaign Classic improper input validation","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:21.077+00:00","url":"https://junglewise.ai/threats/cve-2026-82008-adobe-campaign-classic-acc-is-affected-by-an-improper-input"},{"cve":"CVE-2026-82003","cvss":8.5,"epss":0.0095,"slug":"cve-2026-82003-adobe-campaign-classic-acc-is-affected-by-an-improper-input","title":"Adobe Campaign Classic improper input validation code execution","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:20.887+00:00","url":"https://junglewise.ai/threats/cve-2026-82003-adobe-campaign-classic-acc-is-affected-by-an-improper-input"},{"cve":"CVE-2026-75728","cvss":9.1,"epss":0.0104,"slug":"cve-2026-75728-adobe-campaign-classic-acc-is-affected-by-an-incorrect","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.293+00:00","url":"https://junglewise.ai/threats/cve-2026-75728-adobe-campaign-classic-acc-is-affected-by-an-incorrect"},{"cve":"CVE-2026-75723","cvss":10,"epss":0.0117,"slug":"cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.163+00:00","url":"https://junglewise.ai/threats/cve-2026-75723-adobe-campaign-classic-acc-is-affected-by-an-incorrect"},{"cve":"CVE-2026-75721","cvss":10,"epss":0.0125,"slug":"cve-2026-75721-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection in JSSP","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.033+00:00","url":"https://junglewise.ai/threats/cve-2026-75721-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75703","cvss":10,"epss":0.0125,"slug":"cve-2026-75703-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:15.9+00:00","url":"https://junglewise.ai/threats/cve-2026-75703-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75699","cvss":10,"epss":0.0125,"slug":"cve-2026-75699-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:15.76+00:00","url":"https://junglewise.ai/threats/cve-2026-75699-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-73369","cvss":10,"epss":0.0125,"slug":"cve-2026-73369-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:15.3+00:00","url":"https://junglewise.ai/threats/cve-2026-73369-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-82004","cvss":10,"epss":0.0325,"slug":"cve-2026-82004-adobe-campaign-classic-os-command-injection","title":"Adobe Campaign Classic OS command injection","severity":"critical","exploited":false,"published_at":"2026-09-08T19:19:59.743+00:00","url":"https://junglewise.ai/threats/cve-2026-82004-adobe-campaign-classic-os-command-injection"},{"cve":"CVE-2026-76197","cvss":10,"epss":0.0351,"slug":"cve-2026-76197-adobe-campaign-classic-os-command-injection","title":"Adobe Campaign Classic OS command injection","severity":"critical","exploited":false,"published_at":"2026-08-25T18:18:05.11+00:00","url":"https://junglewise.ai/threats/cve-2026-76197-adobe-campaign-classic-os-command-injection"},{"cve":"CVE-2026-76195","cvss":10,"epss":0.0351,"slug":"cve-2026-76195-adobe-campaign-classic-os-command-injection","title":"Adobe Campaign Classic OS command injection","severity":"critical","exploited":false,"published_at":"2026-08-25T18:18:04.967+00:00","url":"https://junglewise.ai/threats/cve-2026-76195-adobe-campaign-classic-os-command-injection"},{"cve":"CVE-2026-76193","cvss":10,"epss":0.0128,"slug":"cve-2026-76193-adobe-campaign-classic-server-side-request-forgery-to-code","title":"Adobe Campaign Classic Server-Side Request Forgery to code execution","severity":"critical","exploited":false,"published_at":"2026-08-25T18:18:04.813+00:00","url":"https://junglewise.ai/threats/cve-2026-76193-adobe-campaign-classic-server-side-request-forgery-to-code"},{"cve":"CVE-2026-71398","cvss":10,"epss":0.0117,"slug":"cve-2026-71398-adobe-campaign-classic-authorization-bypass-leading-to-code","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-08-11T18:18:22.327+00:00","url":"https://junglewise.ai/threats/cve-2026-71398-adobe-campaign-classic-authorization-bypass-leading-to-code"},{"cve":"CVE-2026-48381","cvss":9,"epss":0.0079,"slug":"cve-2026-48381-adobe-campaign-classic-sql-injection","title":"Adobe Campaign Classic SQL injection","severity":"critical","exploited":false,"published_at":"2026-08-11T18:17:28.247+00:00","url":"https://junglewise.ai/threats/cve-2026-48381-adobe-campaign-classic-sql-injection"},{"cve":"CVE-2026-27302","cvss":10,"epss":0.0117,"slug":"cve-2026-27302-adobe-campaign-classic-authorization-bypass-leading-to-code","title":"Adobe Campaign Classic authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-08-11T18:17:25.603+00:00","url":"https://junglewise.ai/threats/cve-2026-27302-adobe-campaign-classic-authorization-bypass-leading-to-code"},{"cve":"CVE-2026-48449","cvss":10,"slug":"cve-2026-48449-adobe-campaign-classic-incorrect-authorization-remote-code","title":"Adobe Campaign Classic incorrect authorization remote code execution","severity":"critical","exploited":false,"published_at":"2026-07-30T03:16:24.957+00:00","url":"https://junglewise.ai/threats/cve-2026-48449-adobe-campaign-classic-incorrect-authorization-remote-code"}],"weekly":[{"week":"2026-06-29","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":3,"exploited":0,"vulnerabilities":3},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":3,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":16,"exploited":0,"vulnerabilities":17}],"related":[{"name":"Adobe ColdFusion","slug":"coldfusion","vulnerabilities":70,"url":"https://junglewise.ai/threats/technologies/coldfusion"},{"name":"Adobe Acrobat","slug":"acrobat","vulnerabilities":63,"url":"https://junglewise.ai/threats/technologies/acrobat"},{"name":"Adobe Commerce","slug":"commerce","vulnerabilities":62,"url":"https://junglewise.ai/threats/technologies/commerce"},{"name":"Adobe Acrobat Reader","slug":"acrobat-reader","vulnerabilities":60,"url":"https://junglewise.ai/threats/technologies/acrobat-reader"},{"name":"Adobe Flash Player","slug":"flash-player","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/flash-player"},{"name":"Adobe AIR","slug":"air","vulnerabilities":55,"url":"https://junglewise.ai/threats/technologies/air"},{"name":"Adobe Acrobat DC","slug":"acrobat-dc","vulnerabilities":39,"url":"https://junglewise.ai/threats/technologies/acrobat-dc"},{"name":"Adobe Acrobat Reader DC","slug":"acrobat-reader-dc","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/acrobat-reader-dc"},{"name":"Adobe Reader","slug":"reader","vulnerabilities":32,"url":"https://junglewise.ai/threats/technologies/reader"},{"name":"Adobe Magento Open Source","slug":"magento-open-source","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/magento-open-source"},{"name":"Adobe Bridge","slug":"bridge","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/bridge"},{"name":"Adobe Illustrator","slug":"illustrator","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/illustrator"}],"technology":{"hub":true,"name":"Adobe Campaign Classic","slug":"campaign-classic","vendor":{"name":"Adobe","slug":"adobe","url":"https://junglewise.ai/threats/vendors/adobe"},"aliases":[],"category":"marketing-automation","homepage":"https://business.adobe.com/products/campaign/adobe-campaign.html","description":"A marketing automation platform for managing cross-channel customer data and campaigns.","url":"https://junglewise.ai/threats/technologies/campaign-classic"},"most_severe":[{"cve":"CVE-2026-76197","cvss":10,"epss":0.0351,"slug":"cve-2026-76197-adobe-campaign-classic-os-command-injection","title":"Adobe Campaign Classic OS command injection","severity":"critical","exploited":false,"published_at":"2026-08-25T18:18:05.11+00:00","url":"https://junglewise.ai/threats/cve-2026-76197-adobe-campaign-classic-os-command-injection"},{"cve":"CVE-2026-76195","cvss":10,"epss":0.0351,"slug":"cve-2026-76195-adobe-campaign-classic-os-command-injection","title":"Adobe Campaign Classic OS command injection","severity":"critical","exploited":false,"published_at":"2026-08-25T18:18:04.967+00:00","url":"https://junglewise.ai/threats/cve-2026-76195-adobe-campaign-classic-os-command-injection"},{"cve":"CVE-2026-82004","cvss":10,"epss":0.0325,"slug":"cve-2026-82004-adobe-campaign-classic-os-command-injection","title":"Adobe Campaign Classic OS command injection","severity":"critical","exploited":false,"published_at":"2026-09-08T19:19:59.743+00:00","url":"https://junglewise.ai/threats/cve-2026-82004-adobe-campaign-classic-os-command-injection"},{"cve":"CVE-2026-76193","cvss":10,"epss":0.0128,"slug":"cve-2026-76193-adobe-campaign-classic-server-side-request-forgery-to-code","title":"Adobe Campaign Classic Server-Side Request Forgery to code execution","severity":"critical","exploited":false,"published_at":"2026-08-25T18:18:04.813+00:00","url":"https://junglewise.ai/threats/cve-2026-76193-adobe-campaign-classic-server-side-request-forgery-to-code"},{"cve":"CVE-2026-89275","cvss":10,"epss":0.0125,"slug":"cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:29.407+00:00","url":"https://junglewise.ai/threats/cve-2026-89275-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-84412","cvss":10,"epss":0.0125,"slug":"cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:22.923+00:00","url":"https://junglewise.ai/threats/cve-2026-84412-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75721","cvss":10,"epss":0.0125,"slug":"cve-2026-75721-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection in JSSP","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:16.033+00:00","url":"https://junglewise.ai/threats/cve-2026-75721-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75703","cvss":10,"epss":0.0125,"slug":"cve-2026-75703-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:15.9+00:00","url":"https://junglewise.ai/threats/cve-2026-75703-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-75699","cvss":10,"epss":0.0125,"slug":"cve-2026-75699-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:15.76+00:00","url":"https://junglewise.ai/threats/cve-2026-75699-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"},{"cve":"CVE-2026-73369","cvss":10,"epss":0.0125,"slug":"cve-2026-73369-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of","title":"Adobe Campaign Classic code injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:15.3+00:00","url":"https://junglewise.ai/threats/cve-2026-73369-adobe-campaign-classic-acc-is-affected-by-an-improper-control-of"}],"generated_at":"2026-09-26T12:07:00.15149+00:00"}