{"metadata": {"vulnerability": "CVE-2026-104351", "count": 25, "kinds": {"milestone": 4, "sighting": 12, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-01T20:25:32.542Z", "date_only": false, "value": "2026-10-01T20:25:32.542Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-104351", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-27T17:00:00Z", "date_only": false, "value": "2026-10-27T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2026-104351", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T17:03:34.527Z", "date_only": false, "value": "2026-10-27T17:03:34.527Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-104351", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T17:03:34.527Z", "date_only": false, "value": "2026-10-27T17:03:34.527Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2026-104351", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T17:08:09.951Z", "date_only": false, "value": "2026-10-27T17:08:09.951985Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117513970591292552", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "253c5e6d-1d89-47d9-b407-19393cb683ee", "content": "CVE-2026-104351 Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.\nhttps://www.cve.org/CVERecord?id=CVE-2026-104351https://www.adobe.com/trust/security/products/campaign/apsb26-162.html#adobe #Adobe #AdobeCampaignClassic#CVE_2026_104351#bot", "url": "https://infosec.exchange/users/cve/statuses/117513970591292552"}, {"timestamp": "2026-10-27T17:16:55Z", "date_only": false, "value": "2026-10-27T17:16:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2PQ5-JV73-PP93", "record": "GHSA-2PQ5-JV73-PP93", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-27T17:16:55.593Z", "date_only": false, "value": "2026-10-27T17:16:55.593", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104351", "record": "FKIE_CVE-2026-104351", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T18:08:58.881Z", "date_only": false, "value": "2026-10-27T18:08:58.881531Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myutfmbt6d2v", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "361a2f2e-1e84-4903-be92-91e9292b5af2", "content": "\ud83d\udea8 CVE-2026-104351 \u2014 CVSS 9.9 CRITICAL\n\nAdobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104351\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myutfmbt6d2v"}, {"timestamp": "2026-10-27T18:20:04.993Z", "date_only": false, "value": "2026-10-27T18:20:04.993736Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myutzhcgjl2y", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "c1fd5d8a-4853-4a39-8df6-104d1385d694", "content": "CVE-2026-104351 - adobe campaign classic\nAdobe Campaign Classic can be tricked into executing any commands that an attacker supplies, even if the attacker has only limited access. The attack works automatically,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myutzhcgjl2y"}, {"timestamp": "2026-10-27T18:31:37Z", "date_only": false, "value": "2026-10-27T18:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2PQ5-JV73-PP93", "record": "GHSA-2PQ5-JV73-PP93", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T18:31:37Z", "date_only": false, "value": "2026-10-27T18:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2PQ5-JV73-PP93", "record": "GHSA-2PQ5-JV73-PP93", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T07:36:36.526Z", "date_only": false, "value": "2026-10-28T07:36:36.526163Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mywajqaskz2f", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "1f68603e-7bac-4866-8c4c-1dc9896c108a", "content": "Patch 9 critical Adobe vulnerabilities in Adobe Campaign Classic and Connect, including 9.9 CVSS RCE flaws CVE-2026-104351 and CVE-2026-48360.\n\n#Adobe #AdobeCampaign #AdobeConnect #RCE #SQLInjection #Cybersecurity #Vulnerability #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mywajqaskz2f"}, {"timestamp": "2026-10-28T10:15:51Z", "date_only": false, "value": "2026-10-28T10:15:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/10/adobe-fixes-8-critical-campaign-classic.html", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "e53f5110-27bd-450d-9c31-9366d22561ce", "content": "Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation.\n\nThe list of eight vulnerabilities is as follows -\n\n\n  CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitrary code execution.", "url": "https://thehackernews.com/2026/10/adobe-fixes-8-critical-campaign-classic.html"}, {"timestamp": "2026-10-28T11:42:54.204Z", "date_only": false, "value": "2026-10-28T11:42:54.204967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mywoc4pvrc2y", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "ee873845-37cf-489c-bdd4-422a5be9e950", "content": "Mitigating Critical Code Injection Flaws in Adobe Campaign Classic: A Deep Dive into CVE-2026-104351 +\u00a0Video\n\nIntroduction: Adobe has officially released urgent patches addressing a series of eight critical vulnerabilities impacting Adobe Campaign Classic, headlined by the severe code injection\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mywoc4pvrc2y"}, {"timestamp": "2026-10-28T12:41:32.311Z", "date_only": false, "value": "2026-10-28T12:41:32.311850Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/axnews.bsky.social/post/3mywrkz43nj25", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "9dba9276-70e2-4153-bedf-119124081d69", "content": "\ud83d\udea8 Breaking: CVE-2026-104351 \u2014 Critical 9.9\nCode injection \u00b7 over the network \u00b7 any logged-in user\nhttps://ax-news.com/cve/CVE-2026-104351\n#CVE #infosec", "url": "https://bsky.app/profile/axnews.bsky.social/post/3mywrkz43nj25"}, {"timestamp": "2026-10-28T13:50:40Z", "date_only": false, "value": "2026-10-28T13:50:40.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pSlevjs-LvQeupp9IFg2-oa5F-d2vOnXSflHjRk7ZtLvQg", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "ab05205f-efc1-422f-8a05-bdbe1f375160"}, {"timestamp": "2026-10-29T08:11:12Z", "date_only": false, "value": "2026-10-29T08:11:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/10/29/adobe-fixes-critical-campaign-classic.html", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "3488c1b9-21c1-41ad-8577-f8ee52b8efcb", "content": "Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass\n\nAdobe has released patches for multiple critical security flaws in Campaign Classic that could allow arbitrary code execution, security feature bypass and privilege escalation, The Hacker News reports. The eight vulnerabilities include CVE-2026-104351, a code injection flaw rated CVSS 9.9.", "url": "https://threatintel.cc/2026/10/29/adobe-fixes-critical-campaign-classic.html"}, {"timestamp": "2026-10-29T09:12:03.977Z", "date_only": false, "value": "2026-10-29T09:12:03.977440Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117523423139599189", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "b224521e-cd48-43d5-b19a-3dbb290604ea", "content": "Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass\nAdobe has released patches for multiple critical security flaws in Campaign Classic that could allow arbitrary code execution, security feature bypass and privilege escalation, The Hacker News reports. The eight vulnerabilities include CVE-2026-104351, a code injection flaw rated CVSS 9.9. https://thehackernews.com/2026/10/adobe-fixes-8-critical-campaign-classic.html", "url": "https://infosec.exchange/users/edwardk/statuses/117523423139599189"}, {"timestamp": "2026-10-29T16:07:11.212Z", "date_only": false, "value": "2026-10-29T16:07:11.212937Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatroundup.bsky.social/post/3myznjntqxw2q", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "e6c04d95-a73b-49e1-9cb9-e1a94c125a83", "content": "New critical vulnerability in Adobe Campaign Classic: CVE-2026-104351, CVSS 9.9. Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability\u2026 No public exploit reported yet. #CVE #vulnerability\n\nthreatroundup.com/cve/cve-2026...", "url": "https://bsky.app/profile/threatroundup.bsky.social/post/3myznjntqxw2q"}, {"timestamp": "2026-11-02T09:14:35.455Z", "date_only": false, "value": "2026-11-02T09:14:35.455308Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/secpoint.bsky.social/post/3mzcydhvl722e", "record": "CVE-2026-104351", "field": "creation_timestamp", "uuid": "b6de136c-bda6-40e5-b5a8-0a9788a17cc7", "content": "Adobe Campaign Classic: Eight Critical Vulnerabilities\n\nAdobe has released fixes for eight critical vulnerabilities, including low-privilege code execution (CVE-2026-104351) and unauthenticated SQL injection (CVE-2026-105781).\n\n#SecPoint #AdobeCampaign #VulnerabilityManagement #CyberSecurity", "url": "https://bsky.app/profile/secpoint.bsky.social/post/3mzcydhvl722e"}, {"timestamp": "2026-11-02T19:29:35.037Z", "date_only": false, "value": "2026-11-02T19:29:35.037141Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-104351", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-02T19:29:35.037Z", "date_only": false, "value": "2026-11-02T19:29:35.037141Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104351", "record": "FKIE_CVE-2026-104351", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-02T19:29:52.930Z", "date_only": false, "value": "2026-11-02T19:29:52.930Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-104351", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-02T19:29:52.930Z", "date_only": false, "value": "2026-11-02T19:29:52.930Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-104351", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-02T20:17:26.953Z", "date_only": false, "value": "2026-11-02T20:17:26.953", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104351", "record": "FKIE_CVE-2026-104351", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-06T08:20:11.729Z", "anchors": {"origin": {"timestamp": "2026-10-27T17:00:00Z", "date_only": false, "value": "2026-10-27T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2026-104351", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T17:00:00Z", "date_only": false, "value": "2026-10-27T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2026-104351", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 832811.72988, "hours": 231.33659163333334, "days": 9.639024651388889, "min_seconds": 832811.72988, "max_seconds": 832811.72988, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T17:00:00Z", "date_only": false, "value": "2026-10-27T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2026-104351", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-06T08:20:11.729Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}