28 October 2026
Reference: CVE-2026-104351
1. What is being reported?
Adobe Campaign Classic has a vulnerability where attackers can inject and run malicious code with the same permissions as the current user. This means someone with low-level access could exploit this flaw to take control or cause harm without any user interaction.
2. What this means in plain English
If your organisation uses Adobe Campaign Classic, an attacker could potentially run harmful software on your system without you knowing. This could lead to data breaches, disruption of services, or other security problems. Because the attack doesn’t need anyone to click on a link or open a file, it’s especially risky.
3. Could this affect a small business?
Small businesses or charities using Adobe Campaign Classic could be affected, especially if the software is connected to the internet or used by multiple people. Organisations not using this software are not at risk from this specific issue.
4. What to do now
- Check if your organisation uses Adobe Campaign Classic and identify where it is installed.
- Contact your IT provider or software supplier to confirm if updates or patches are available to fix this vulnerability.
- Apply any security updates or patches from Adobe as soon as possible.
- Review user permissions to limit access to Adobe Campaign Classic to only trusted staff.
5. Ask your IT provider
Can you confirm if our Adobe Campaign Classic installation is affected by CVE-2026-104351, and have the necessary security updates been applied to protect against this vulnerability?
6. Bottom line
If you use Adobe Campaign Classic, act quickly to update it and reduce the risk of unauthorised code running on your systems.
Information based on NVD, CISA KEV, and reputable security news reporting.