{"api_version":"1","generated_at":"2026-08-22T03:12:26+00:00","cve":"CVE-2026-48333","urls":{"html":"https://cve.report/CVE-2026-48333","api":"https://cve.report/api/cve/CVE-2026-48333.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-48333","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-48333"},"summary":{"title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)","description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.","state":"PUBLISHED","assigner":"adobe","published_at":"2026-08-03 23:16:46","updated_at":"2026-08-06 14:41:40"},"problem_types":["CWE-863","CWE-863 Incorrect Authorization (CWE-863)"],"metrics":[{"version":"3.1","source":"psirt@adobe.com","type":"Secondary","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","availabilityRequirement":"NOT_DEFINED","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","confidentialityRequirement":"NOT_DEFINED","environmentalScore":9.8,"environmentalSeverity":"CRITICAL","exploitCodeMaturity":"NOT_DEFINED","integrityImpact":"HIGH","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"LOW","modifiedAttackVector":"NETWORK","modifiedAvailabilityImpact":"HIGH","modifiedConfidentialityImpact":"HIGH","modifiedIntegrityImpact":"HIGH","modifiedPrivilegesRequired":"NONE","modifiedScope":"UNCHANGED","modifiedUserInteraction":"NONE","privilegesRequired":"NONE","remediationLevel":"NOT_DEFINED","reportConfidence":"NOT_DEFINED","scope":"UNCHANGED","temporalScore":9.8,"temporalSeverity":"CRITICAL","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://helpx.adobe.com/security/products/campaign/apsb26-120.html","name":"https://helpx.adobe.com/security/products/campaign/apsb26-120.html","refsource":"psirt@adobe.com","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48333","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48333","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Adobe","product":"Adobe Campaign Classic","version":"affected ACC v7: 7.4.3 build 9398 custom","platforms":[]},{"source":"CNA","vendor":"Adobe","product":"Adobe Campaign Classic","version":"unaffected ACC v7: 7.4.3 build 9399 custom","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2026","cve_id":"48333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"campaign","cpe6":"7.4.3","cpe7":"9394","cpe8":"*","cpe9":"*","cpe10":"classic","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"48333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"campaign","cpe6":"7.4.3","cpe7":"9396","cpe8":"*","cpe9":"*","cpe10":"classic","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"48333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"campaign","cpe6":"7.4.3","cpe7":"9397","cpe8":"*","cpe9":"*","cpe10":"classic","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"48333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"campaign","cpe6":"7.4.3","cpe7":"9398","cpe8":"*","cpe9":"*","cpe10":"classic","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"48333","vulnerable":"1","versionEndIncluding":"7.4.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"campaign","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"classic","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"48333","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"48333","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"48333","cve":"CVE-2026-48333","epss":"0.004730000","percentile":"0.385070000","score_date":"2026-08-09","updated_at":"2026-08-10 00:07:36"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-48333","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-08-04T14:14:34.331610Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-08-04T14:14:45.431Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"affected","product":"Adobe Campaign Classic","vendor":"Adobe","versions":[{"lessThanOrEqual":"ACC v7: 7.4.3 build 9398","status":"affected","version":"0","versionType":"custom"},{"status":"unaffected","version":"ACC v7: 7.4.3 build 9399","versionType":"custom"}]}],"datePublic":"2026-08-03T17:00:00.000Z","descriptions":[{"lang":"en","value":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","availabilityRequirement":"NOT_DEFINED","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","confidentialityRequirement":"NOT_DEFINED","environmentalScore":9.8,"environmentalSeverity":"CRITICAL","exploitCodeMaturity":"NOT_DEFINED","integrityImpact":"HIGH","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"LOW","modifiedAttackVector":"NETWORK","modifiedAvailabilityImpact":"HIGH","modifiedConfidentialityImpact":"HIGH","modifiedIntegrityImpact":"HIGH","modifiedPrivilegesRequired":"NONE","modifiedScope":"UNCHANGED","modifiedUserInteraction":"NONE","privilegesRequired":"NONE","remediationLevel":"NOT_DEFINED","reportConfidence":"NOT_DEFINED","scope":"UNCHANGED","temporalScore":9.8,"temporalSeverity":"CRITICAL","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-863","description":"Incorrect Authorization (CWE-863)","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-03T22:37:06.245Z","orgId":"078d4453-3bcd-4900-85e6-15281da43538","shortName":"adobe"},"references":[{"tags":["vendor-advisory"],"url":"https://helpx.adobe.com/security/products/campaign/apsb26-120.html"}],"source":{"discovery":"EXTERNAL"},"title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)","x_generator":{"engine":"cvelib 1.8.0"}}},"cveMetadata":{"assignerOrgId":"078d4453-3bcd-4900-85e6-15281da43538","assignerShortName":"adobe","cveId":"CVE-2026-48333","datePublished":"2026-08-03T22:37:06.245Z","dateReserved":"2026-05-21T15:28:38.139Z","dateUpdated":"2026-08-04T14:14:45.431Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-08-03 23:16:46","lastModifiedDate":"2026-08-06 14:41:40","problem_types":["CWE-863","CWE-863 Incorrect Authorization (CWE-863)"],"metrics":{"cvssMetricV31":[{"source":"psirt@adobe.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-04T14:14:34.331610Z","id":"CVE-2026-48333","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*","versionEndIncluding":"7.4.2","matchCriteriaId":"7B8DCC6A-0967-4897-94B8-DD22DA5AB841"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:campaign:7.4.3:9394:*:*:classic:*:*:*","matchCriteriaId":"A6BFE9C0-BB34-4769-B94E-14E637695679"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:campaign:7.4.3:9396:*:*:classic:*:*:*","matchCriteriaId":"E05FE070-A1F8-48B9-A15E-CB87E351E9E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:campaign:7.4.3:9397:*:*:classic:*:*:*","matchCriteriaId":"1BA9BB73-939F-4A0B-B8F5-1942E17F2265"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:campaign:7.4.3:9398:*:*:classic:*:*:*","matchCriteriaId":"7ADE87F6-3CA4-4E35-A125-23C2FB605A95"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"48333","Ordinal":"1","Title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)","CVE":"CVE-2026-48333","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"48333","Ordinal":"1","NoteData":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.","Type":"Description","Title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)"}]}}}