Adobe patches CVSS 10.0 Campaign Classic bug that runs code silently
Adobe released updates for Campaign Classic that close CVE-2026-48449, a CVSS 10.0 vulnerability allowing arbitrary code execution without any user interaction, and CVE-2026-48448, an SQL‑injection flaw. No evidence of active exploitation exists, but admins should upgrade to ACC v7.4.3 build 9398 immediately.