CVE-2026-48449 is an Incorrect Authorization vulnerability in Adobe Campaign Classic that enables an attacker to execute arbitrary code in the context of the current user without requiring user interaction. The vulnerability impacts confidentiality, integrity, and availability with a critical CVSS 3.1 base score of 10. The scope of the vulnerability is changed, indicating a potential privilege or security boundary bypass. No vendor advisory or patch information is available at this time.

Successful exploitation could lead to full compromise of the affected system under the privileges of the current user, including arbitrary code execution and complete loss of confidentiality, integrity, and availability. The vulnerability does not require user interaction, increasing the risk of automated or remote exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is currently available. Monitor Adobe's security advisories for updates and apply patches promptly once released.