CVE-2026-48399

{
  "id": "CVE-2026-48399",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-03T23:16:46.693",
  "lastModified": "2026-10-23T23:10:00.157",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction."
    },
    {
      "lang": "es",
      "value": "Adobe Campaign Classic (ACC) se ve afectado por una vulnerabilidad de Violación de Principios de Diseño Seguro que podría resultar en una elusión de característica de seguridad. Un atacante podría aprovechar esta vulnerabilidad para eludir medidas de seguridad y obtener acceso de lectura no autorizado. La explotación de este problema no requiere interacción del usuario."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Adobe Campaign Classic",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "ACC v7: 7.4.3 build 9398",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "ACC v7: 7.4.3 build 9399",
              "versionType": "custom",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-04T15:43:26.476817Z",
          "id": "CVE-2026-48399",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-657"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*",
              "versionEndIncluding": "7.4.2",
              "matchCriteriaId": "7B8DCC6A-0967-4897-94B8-DD22DA5AB841"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9394:*:*:classic:*:*:*",
              "matchCriteriaId": "A6BFE9C0-BB34-4769-B94E-14E637695679"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9396:*:*:classic:*:*:*",
              "matchCriteriaId": "E05FE070-A1F8-48B9-A15E-CB87E351E9E0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9397:*:*:classic:*:*:*",
              "matchCriteriaId": "1BA9BB73-939F-4A0B-B8F5-1942E17F2265"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9398:*:*:classic:*:*:*",
              "matchCriteriaId": "7ADE87F6-3CA4-4E35-A125-23C2FB605A95"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://helpx.adobe.com/security/products/campaign/apsb26-120.html",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}