{"id":"CVE-2026-48333","state":"PUBLISHED","title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)","description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.","publishedAt":"2026-08-03T22:37:06.245Z","updatedAt":"2026-08-27T22:34:00.258Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"adobe"},"assigner":"adobe","products":["Adobe Adobe Campaign Classic"],"affected":[{"vendor":"Adobe","product":"Adobe Campaign Classic","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"ACC v7: 7.4.3 build 9398","versionType":"custom"},{"version":"ACC v7: 7.4.3 build 9399","status":"unaffected","versionType":"custom"}]}],"references":["https://helpx.adobe.com/security/products/campaign/apsb26-120.html"],"weaknesses":["CWE-863"],"ingestedAt":"2026-10-29T20:12:07.131Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/48xxx/CVE-2026-48333.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-48333","state":"PUBLISHED","datePublished":"2026-08-03T22:37:06.245Z","dateUpdated":"2026-08-27T22:34:00.258Z","assignerShortName":"adobe","assignerOrgId":"078d4453-3bcd-4900-85e6-15281da43538","dateReserved":"2026-05-21T15:28:38.139Z"},"containers":{"cna":{"title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)","descriptions":[{"lang":"en","value":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction."}],"affected":[{"vendor":"Adobe","product":"Adobe Campaign Classic","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"ACC v7: 7.4.3 build 9398","versionType":"custom"},{"version":"ACC v7: 7.4.3 build 9399","status":"unaffected","versionType":"custom"}]}],"references":[{"url":"https://helpx.adobe.com/security/products/campaign/apsb26-120.html","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","availabilityRequirement":"NOT_DEFINED","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","confidentialityRequirement":"NOT_DEFINED","environmentalScore":9.8,"environmentalSeverity":"CRITICAL","exploitCodeMaturity":"NOT_DEFINED","integrityImpact":"HIGH","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"LOW","modifiedAttackVector":"NETWORK","modifiedAvailabilityImpact":"HIGH","modifiedConfidentialityImpact":"HIGH","modifiedIntegrityImpact":"HIGH","modifiedPrivilegesRequired":"NONE","modifiedScope":"UNCHANGED","modifiedUserInteraction":"NONE","privilegesRequired":"NONE","remediationLevel":"NOT_DEFINED","reportConfidence":"NOT_DEFINED","scope":"UNCHANGED","temporalScore":9.8,"temporalSeverity":"CRITICAL","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-863","description":"Incorrect Authorization (CWE-863)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"adobe","orgId":"078d4453-3bcd-4900-85e6-15281da43538","dateUpdated":"2026-08-27T22:34:00.258Z"},"datePublic":"2026-08-03T17:00:00.000Z","source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-04T14:14:34.331610Z","id":"CVE-2026-48333","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-04T14:14:45.431Z"}}]}}}