Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')… (CVE-2026-76197)

CVE-2026-76197 is an OS Command Injection vulnerability in Adobe Campaign Classic (ACC) caused by improper neutralization of special elements used in OS commands. This flaw enables remote attackers to execute arbitrary code in the context of the current user without requiring any user interaction. The vulnerability has a critical severity with a CVSS 3.1 base score of 10. The scope is changed, indicating that the impact extends beyond the vulnerable component. No official patch or fix has been documented in the provided data.

Successful exploitation allows an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full system compromise depending on user rights. The vulnerability does not require user interaction, increasing the risk of automated or remote exploitation. The changed scope suggests that the impact could affect other components or systems beyond the initially vulnerable part.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No vendor advisory or patch information is currently provided.