Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Adobe has released security updates to address eight critical flaws in Campaign Classic that could allow arbitrary code execution and security bypass.
The vulnerabilities, with CVSS scores ranging from 9.1 to 9.9, include code injection, SQL injection, and cross-site scripting flaws. These issues affect Adobe Campaign Classic versions 7.4.4 build 9402 and earlier for both Windows and Linux platforms.
Adobe has addressed these vulnerabilities in version 7.4.4 build 9403. The company also resolved a critical code injection flaw in Adobe Connect Desktop and Mobile for Windows, macOS, and Android (CVE-2026-48360, CVSS score: 9.6).
Updated versions
The Adobe Connect vulnerability has been fixed in multiple versions: Windows version 2026.9.61, macOS Silicon version 2026.10.66, macOS Intel version 2026.10.170, and Adobe Connect Mobile for Android version 4.5.
It's not aware of any exploits in the wild for any of the issues addressed in the update.
User recommendation
Adobe advises users to update to the latest versions of its software for optimal protection against potential exploits. The company emphasizes the importance of applying these security patches promptly to prevent unauthorized access and code execution.
Related
