Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

Illustration of a document locked with a padlock

Adobe has released security patches addressing eight critical vulnerabilities in Campaign Classic. These flaws could allow attackers to execute arbitrary code, bypass security features, and escalate privileges if exploited. The vulnerabilities include code injection, operating system code injection, authorization issues, and multiple SQL injection flaws, with severity scores ranging from 9.1 to 9.9. The affected versions are Campaign Classic 7.4.4 build 9402 and earlier on Windows and Linux systems, with patches available in version 7.4.4 build 9403.

Additionally, Adobe fixed a critical code injection vulnerability in Adobe Connect Desktop and Mobile applications across Windows, macOS, and Android platforms. The flaw could enable arbitrary code execution and has been patched in Connect Desktop versions 2026.9.61 for Windows, 2026.10.66 for macOS Silicon, 2026.10.170 for macOS Intel, and Connect Mobile version 4.5 for Android. Adobe confirmed no active exploits have been discovered for any of these issues and recommends users update to the latest versions immediately.

Source: Read the full story at The Hacker News

This summary was written with AI assistance from the linked source.

Send this to yourself, or to someone who should see it

Enter your email and we will send you a link to this article.

We use your email only to send this link. It is not saved or added to any list.

Or share it