Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

What happened?

Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitrary code execution.

Key details

• Adobe patched 8 critical Campaign Classic flaws allowing code execution and security bypass.
• CVE-2026-104351 is a code injection flaw enabling arbitrary code execution.
• CVE-2026-104353 is an OS code injection flaw enabling arbitrary code execution.
• CVE-2026-105780 is an authorization flaw enabling arbitrary code execution.
• CVE-2026-105489 is an SQL injection flaw enabling security feature bypass.
• CVE-2026-105781 is an SQL injection flaw enabling security feature bypass.
• CVE-2026-104350 is a reflected XSS flaw enabling privilege escalation.

Summarised by SecOraLens from The Hacker News. Always read the original source before acting. How SecOraLens verifies advisories.