CVE-2026-104351
9.9CVSS base score · critical (NVD)
Not in KEVNo confirmed exploitation in CISA's catalog yet
What happened
Adobe released patches for eight critical vulnerabilities in Campaign Classic, including CVE-2026-104351 (CVSS 9.9) enabling arbitrary code execution, security bypass, and privilege escalation. No exploitation in the wild has been confirmed yet. Organizations running Campaign Classic should apply these patches immediately to prevent remote code execution attacks on email marketing infrastructure.
From the Intel60 brief of Oct 28, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalAdobe Campaign Classic eight critical code execution flaws patchedOct 28, 2026