CVE-2026-48399 describes a security design flaw in Adobe Campaign Classic that enables attackers to bypass security controls, resulting in unauthorized read access to data. The vulnerability requires no user interaction and can be exploited remotely with low attack complexity and no privileges. The CVSS v3.1 base score is 7.5, reflecting a high impact on confidentiality but no impact on integrity or availability. There is no vendor advisory or patch information available at this time, and affected versions have not been explicitly stated.

Successful exploitation leads to unauthorized disclosure of sensitive information due to bypassing security features. There is no reported impact on data integrity or system availability. The vulnerability can be exploited remotely without authentication or user interaction, increasing the risk of exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor Adobe's security advisories for updates. No specific mitigation or workaround is currently documented.