Critical Vulnerabilities Found in Adobe Products Allowing Code Execution

Critical Vulnerabilities Found in Adobe Products Allowing Code Execution

First seen 12 Aug 2026, 13:08 UTC •CisecurityHeise.De •70% similarity •72.0

Article Content

Browse articles
ThreatCluster

Multiple critical vulnerabilities have been identified in Adobe products, including Campaign Classic and ColdFusion, with CVEs such as CVE-2026-48362 and CVE-2026-71398 rated at a CVSS score of 10. Attackers could exploit these vulnerabilities to execute arbitrary code, potentially compromising entire systems. The vulnerabilities could allow unauthorized actions, including installing programs and altering data, depending on user privileges. Adobe has released patches for affected versions, including ColdFusion 2023 and Campaign Classic ACC v7. Despite the severity, there are currently no reports of active exploitation. Security experts recommend immediate patching to mitigate risks. The vulnerabilities were disclosed on August 11, 2026, and are classified as critical.

Key Points: • Adobe products, including Campaign Classic and ColdFusion, have critical vulnerabilities. • CVE-2026-48362 and CVE-2026-71398 have a CVSS score of 10, allowing for arbitrary code execution. • Patches are available, and immediate installation is recommended to prevent potential exploitation.

ThreatCluster AI How this analysis works

Timeline

2026-08-11
Multiple vulnerabilities disclosed
Adobe announced critical vulnerabilities in Campaign Classic and ColdFusion, allowing for arbitrary code execution.
Cisecurity
2026-08-11
CVE-2026-71398 published
A critical vulnerability in Adobe Campaign Classic was published, rated with a CVSS score of 10.
Cisecurity
2026-08-11
CVE-2026-48362 published
A critical vulnerability in ColdFusion was published, rated with a CVSS score of 10.
Cisecurity
2026-08-11
Patches released
Adobe released security patches for affected products, urging immediate installation by administrators.
Heise.De
2026-08-11
CVE-2026-48439 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-11
CVE-2026-48441 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-11
CVE-2026-27302 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Adobe Campaign Classic Campaign Classic ColdFusion Content Credentials SDK Lightroom Classic