Adobe Campaign Classic
Adobe Campaign Classic is a marketing campaign management solution. It has been the target of multiple critical vulnerabilities, including authorization flaws and…
Tag: Adobe
Adobe Commerce
Adobe Commerce is an e-commerce platform. A recent vulnerability allowed privilege escalation due to incorrect authorization.
CVE-2026-27302: Critical Authorization Flaw in Adobe Campaign Classic
A CVSS 10.0 incorrect authorization vulnerability in Adobe Campaign Classic that could allow arbitrary code execution. Fixed in ACC v7 7.4.4 build…
CVE-2026-48381: SQL Injection in Adobe Campaign Classic
A CVSS 9.0 SQL injection vulnerability in Adobe Campaign Classic that could lead to arbitrary code execution. Fixed in ACC v7 7.4.4…
Adobe ColdFusion
Adobe ColdFusion is a commercial rapid web application development platform. Recent updates address critical vulnerabilities including command injection and eval injection.
Adobe Patches Critical ColdFusion and Campaign Classic Flaws with Multiple CVSS 10.0 Ratings
Adobe has released security updates addressing multiple critical vulnerabilities in ColdFusion, Commerce, and Campaign Classic. The most severe include three CVSS 10.0…
CVE-2026-48362: Critical OS Command Injection in Adobe ColdFusion
A CVSS 10.0 operating system command injection vulnerability in Adobe ColdFusion that could allow arbitrary code execution. Fixed in versions 2025.0.12 and…
CVE-2026-48273: Eval Injection in Adobe ColdFusion
A CVSS 9.9 eval injection vulnerability in Adobe ColdFusion that could lead to arbitrary code execution. Fixed in versions 2025.0.12 and 2023.0.23.
CVE-2026-71384: Incorrect Authorization in Adobe ColdFusion Leading to DoS
A CVSS 9.6 incorrect authorization vulnerability in Adobe ColdFusion that could cause application denial-of-service. Fixed in versions 2025.0.12 and 2023.0.23.
CVE-2026-71362: Privilege Escalation in Adobe Commerce
A CVSS 9.1 incorrect authorization vulnerability in Adobe Commerce that could lead to privilege escalation.