{"vulnerability": "CVE-2026-48449", "sightings": [{"uuid": "aeb94f6d-473c-44dd-b539-e65bb760ce6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrumabkynk26", "content": "CVE-2026-48449 - Critical RCE in Adobe Campaign Classic. Incorrect Authorization allows code execution without user interaction. CVSS 10. Unpatched - take immediate action. #CVE #Adobe #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48449/", "creation_timestamp": "2026-07-30T14:04:22.358985Z"}, {"uuid": "01298394-eedf-45b8-81fc-d6338dc59f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtjzfcgkl2e", "content": "CVE-2026-48449\nAdobe Campaign Classic has a security flaw that allows an attacker to access and control the account of a legitimate user without needing their permission. This could lead to sensitive data being compromised or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T03:52:04.324012Z"}, {"uuid": "4626d1e0-37a7-4d27-8701-c87fc083efa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtkiggdyr2u", "content": "\ud83d\udd34 CVE-2026-48449 - Critical (10)\n\nAdobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48449/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T04:00:29.858490Z"}, {"uuid": "dcfe0595-96a6-4bfd-9340-16a47ae8ecec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html", "content": "Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution.\n\nThe vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system.\n\nIt has been described as a case of incorrect authorization that could result in", "creation_timestamp": "2026-08-01T10:00:38.766305Z"}, {"uuid": "70740e4c-7f0e-4ab4-a600-56eac91ff886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "Telegram/nH3urMEX3q2z2GduZzAZDrSGR4Ur7InM5c7di77ZyWhzXA", "content": "", "creation_timestamp": "2026-08-01T11:00:03.371304Z"}, {"uuid": "61742fb5-4795-4499-9943-3b492f0f5390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrzcv5vr7s2e", "content": "Adobe patched a CVSS 10.0 flaw in Campaign Classic, CVE-2026-48449, that could enable code execution without user interaction. It also fixed CVE-2026-48448, an SQL injection bug tied to file reads. #Adobe #CampaignClassic #CVE202648449", "creation_timestamp": "2026-08-01T11:00:24.860116Z"}, {"uuid": "efb2da99-0961-4224-b694-a4a59392b2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrzx7c6qvi2n", "content": "Adobe rolled out a patch for CVE-2026-48449 to stop unauthenticated code execution. Naturally, eight critical Bridge flaws tag along.\n\n#OhLookAPatch #AdobeAgain", "creation_timestamp": "2026-08-01T17:03:59.884776Z"}, {"uuid": "2efa87a6-76c8-44cd-9864-c2c03ab06c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrzx7eryqb2u", "content": "Just another Tuesday as Adobe releases a fix for CVE-2026-48449, a perfect 10.0 flaw in Campaign Classic letting remote attackers execute code without even asking nicely. The chaos extends to Adobe Bridge users too, who now get to enjoy updates for eight additional critical vulne...\n\nRead full story", "creation_timestamp": "2026-08-01T17:04:02.054338Z"}, {"uuid": "8b8afefe-ba5a-44d7-9901-98ff3068c8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrvwke5nzx2g", "content": "Adobe Campaign Classic flaw CVE-2026-48449 scores a perfect CVSS 10.0 and allows arbitrary code execution. Update to build 9398 now.\n\n#AdobeCampaignClassic #CVE202648449 #RCE #Adobe #InfoSec", "creation_timestamp": "2026-07-31T02:41:38.497355Z"}, {"uuid": "36d98075-3df1-4bf4-8e91-db1d6a56aa19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mrw6vrawiq2h", "content": "Adobe Campaign Classic\u306e\u8106\u5f31\u6027CVE-2026-48449\u306f\u3001CVSS 10.0\u30ec\u30d9\u30eb\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b \n\nAdobe Campaign Classic CVE-2026-48449 Enables Code Execution at CVSS 10.0  #DailyCyberSecurity (Jul 31)\n\nsecurityonline.info/adobe-campai...", "creation_timestamp": "2026-07-31T05:11:10.622414Z"}, {"uuid": "1a1d8fd7-43fd-4a93-965b-ed86bca26527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrz2kwbtkt2g", "content": "Adobe Campaign Classic\u3067\u3001\u8a8d\u8a3c\u4e0d\u5099\u306b\u3088\u308b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-48449\uff09\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002CVSS\u30b9\u30b3\u30a2\u306f10.0\u3067\u3059\u3002", "creation_timestamp": "2026-08-01T08:31:31.767089Z"}, {"uuid": "6a02e7cf-a498-4b86-a4ae-0204c4494905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrz5tttfed2c", "content": "\ud83e\udd16 CVE-2026-48449 (CVSS 10.0): incorrect authorization in Adobe Campaign Classic allows arbitrary code execution without user interaction. Patch released.\nhttps://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html", "creation_timestamp": "2026-08-01T09:30:13.823972Z"}]}