CVE-2026-75723
📛 CVE Title
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Description
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Overview
- State
- PUBLISHED
- Assigner (CNA)
- adobe
- CVSS severity
- CRITICAL
- CVSS score
- 10.0 / 10
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H- Effective score
- 10.0 / 10 CRITICAL source: CNA overview
- CWE(s)
-
CWE-863 - Reserved
- 2026-08-18
- Published
- 2026-09-22 17:39 UTC
- Last updated
- 2026-09-22 18:33 UTC
- Source
- https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75723.json
- Linked Threat
- CVE-2026-75723 — Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
NVD triage scoring NVD CVE 2.0
Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.
- NVD published
- 2026-09-22 18:17:16 UTC
- NVD last modified
- 2026-09-22 19:16:47 UTC
- NVD CVSS v3.1
- 10.0 / 10 CRITICAL source: psirt@adobe.com
- NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H- Exploitability subscore
- 3.9 / 10
- Impact subscore
- 6.0 / 10
NVD / KEV / EPSS data refreshed 2026-09-23 02:44 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-84659 - Assigner
- adobe
- Published
- Sep 22, 2026, 5:39:56 PM
- Updated
- Sep 22, 2026, 6:33:50 PM
- EUVD base score (CVSS 3.1)
-
10.0 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - EUVD-reported EPSS
- 0.0000
- Vendors
- Adobe
- Products
-
Adobe Campaign Classic (0 ≤7.4.4 build 9401)
- Aliases
-
GHSA-j75q-fm7g-j9hx
ENISA description: Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
EUVD references (1)
Affected products (1)
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Adobe | Adobe Campaign Classic |
0 (affected),
7.4.4 build 9402 (unaffected)
|
— |
Vendor references (1)
References embedded in the original CVE record by the assigning CNA.
Web references (0)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
No web references attached yet.
NVD-tagged references (1)
Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.
Remediations (10)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:worldofwarcraft.blizzard.com
Content Update Notes World of Warcraft is constantly being updated to add new playable content, fix bugs, and enhance your gameplay experience. Read about the latest updates and hotfixes right here.
2026-09-23 15:16 UTC -
web:7launcher.com
Get help with 7Launcher installation, game updates, launch errors, downloads and account questions, plus clear ways to contact the support team.
2026-09-23 15:16 UTC -
web:bunnymuffins.lol
Best TFT Comps for Set 18 - Learn from the most instructive and LONGEST player run TFT Tier List & Builds that has helped millions climb fast!
2026-09-23 15:16 UTC -
web:catalog.update.microsoft.com
Welcome to the Microsoft Update Catalog site. We want your feedback! Visit our newsgroup or send us an email to provide us with your thoughts and suggestions. To get started using the site, enter in your search terms in the Search box above or visit our FAQ for search tips. |Newsgroup|Send us your feedback
2026-09-23 15:16 UTC -
web:discord.com
Check out the Online- Fix community on Discord - hang out with 108419 other members and enjoy free voice and text chat.
2026-09-23 15:16 UTC -
web:fix-it-up.fandom.com
1 Merquis G Wafer 2 Porx JT3 RF 3 Mata FX7 4 Missah Groundline F34 5 Kart 6 Porx JT2 RF 7 Missah Groundline F32 8 Lambemos Golhoes 9 Lambemos Iris 10 DOGO Desafio 11 Lararry R40 12 Missah JTF 13 Toyoda Supwa A90 14 Holde NisX 15 Chule Curgette C7 16 McLumber 520 17 Sucato Empresa 18 Vemca K3 G 19 Holde S2k 20 Toyoda TR2 21 Toyoda Supwa 22 Ruity Shadow 23 Four Mustank 70s 24 Mata 787F 25 ...
2026-09-23 15:16 UTC -
web:fix-it-up.fandom.com
Fix It Up is a Roblox car repair simulator game developed by .workspace. Players buy or find broken cars, repair damaged parts, customize them, and sell them for profit.
2026-09-23 15:16 UTC -
web:github.com
Automatically translate, uncensor and update Koikatu! and Koikatsu Party! - Releases · ManlyMarco/KK-HF_Patch
2026-09-23 15:16 UTC -
web:github.com
Automatically translate, uncensor and update Koikatsu Sunshine! - ManlyMarco/KKS-HF_Patch
2026-09-23 15:16 UTC -
web:shiravune.com
Shiravune is hard at work translating Japanese visual novels into English and Chinese. See our new and upcoming releases on our official website!
2026-09-23 15:16 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.
Raw JSON
The full cvelistV5 record. Download as CVE-2026-75723.json.
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-75723",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-22T18:33:41.821709Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-22T18:33:50.834Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Adobe Campaign Classic",
"vendor": "Adobe",
"versions": [
{
"lessThanOrEqual": "7.4.4 build 9401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "7.4.4 build 9402",
"versionType": "custom"
}
]
}
],
"datePublic": "2026-09-08T17:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"confidentialityRequirement": "NOT_DEFINED",
"environmentalScore": 10,
"environmentalSeverity": "CRITICAL",
"exploitCodeMaturity": "NOT_DEFINED",
"integrityImpact": "HIGH",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "LOW",
"modifiedAttackVector": "NETWORK",
"modifiedAvailabilityImpact": "HIGH",
"modifiedConfidentialityImpact": "HIGH",
"modifiedIntegrityImpact": "HIGH",
"modifiedPrivilegesRequired": "NONE",
"modifiedScope": "CHANGED",
"modifiedUserInteraction": "NONE",
"privilegesRequired": "NONE",
"remediationLevel": "NOT_DEFINED",
"reportConfidence": "NOT_DEFINED",
"scope": "CHANGED",
"temporalScore": 10,
"temporalSeverity": "CRITICAL",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization (CWE-863)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-22T17:39:56.197Z",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://helpx.adobe.com/security/products/campaign/apsb26-142.html"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)",
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2026-75723",
"datePublished": "2026-09-22T17:39:56.197Z",
"dateReserved": "2026-08-18T01:29:54.621Z",
"dateUpdated": "2026-09-22T18:33:50.834Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}