CVE-2026-104351: Adobe Fixes Critical Campaign Classic Code Injection Flaw

# CVE-2026-104351: Adobe Fixes Critical Campaign Classic Code Injection Flaw

https://gcdradar.vercel.app/incidents/cve-2026-104351-adobe-fixes-critical-campaign-classic-code-i · AIR-2026-1616 · closed 2026-11-11

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Critical rating with a vendor fix available.
- Fix status: Patched
- First reported: 2026-10-28
- AI role: No AI role
- Products: Campaign Classic
- CVE ids: CVE-2026-104351
- CVSS: 9.9

## Summary

Adobe released security updates to fix eight critical vulnerabilities in Campaign Classic, including a code injection flaw tracked as CVE-2026-104351. Successful exploitation of these issues can lead to arbitrary code execution and privilege escalation.

## What to do

Apply the latest security patches provided by Adobe for Campaign Classic.

## Affected and fixed versions

- Affected: Adobe Campaign Classic
- Fixed in: Adobe Campaign Classic latest patch

## Latest updates

- 2026-10-28: Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass (https://thehackernews.com/2026/10/adobe-fixes-8-critical-campaign-classic.html)

## Sources

- 2026-10-28 The Hacker News: Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass https://thehackernews.com/2026/10/adobe-fixes-8-critical-campaign-classic.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.