Adobe has recently issued updates to rectify several critical vulnerabilities in its Campaign Classic software, which could otherwise permit unauthorized code execution and security bypasses if exploited. These vulnerabilities, impacting various versions of the software, have been addressed to enhance user protection.
Detailed Overview of the Vulnerabilities
The update targets eight significant vulnerabilities, all of which carried high CVSS scores, indicating their potential severity. Among these, CVE-2026-104351 and CVE-2026-104353 are notable for their capacity to facilitate arbitrary code execution through code injection flaws. Additionally, CVE-2026-105780 introduces risks through incorrect authorization leading to similar outcomes.
SQL injection vulnerabilities such as CVE-2026-105489, CVE-2026-105781, CVE-2026-104354, and CVE-2026-105779 presented risks of bypassing security features. Meanwhile, CVE-2026-104350 highlighted a cross-site scripting issue that could escalate user privileges, further emphasizing the need for immediate attention.
Impact on Adobe Campaign Classic Users
These security issues affect Adobe Campaign Classic version 7.4.4 build 9402 and earlier on both Windows and Linux platforms. Users are urged to upgrade to version 7.4.4 build 9403, which effectively addresses these vulnerabilities. This update is pivotal to maintaining the security and integrity of systems running these versions.
In addition to Campaign Classic, Adobe has also remedied a critical code injection flaw (CVE-2026-48360) in Adobe Connect Desktop and Mobile applications across Windows, macOS, and Android platforms. This vulnerability, boasting a CVSS score of 9.6, allowed for arbitrary code execution if left unpatched.
Ensuring Continued Security
The updates for Adobe Connect Desktop include versions 2026.9.61 for Windows, 2026.10.66 for macOS Silicon, and 2026.10.170 for macOS Intel. For Android, Adobe Connect Mobile has been updated to version 4.5. Adobe has affirmed that there have been no known exploits of these vulnerabilities in the wild, but emphasizes the importance of users promptly updating their software to safeguard against potential threats.
Staying current with software updates is crucial for maintaining digital security. Adobe’s proactive approach in addressing these vulnerabilities highlights the company’s commitment to protecting its users. Continuous vigilance and timely updates are essential strategies in the ongoing battle against cybersecurity threats.
