CVE-2026-48449 is an Incorrect Authorization vulnerability in Adobe Campaign Classic. This flaw allows an attacker to execute arbitrary code in the context of the current user without any user interaction. The vulnerability affects the security scope, indicating a potential escalation or broader impact. The CVSS v3.1 base score is 10.0, reflecting critical impact on confidentiality, integrity, and availability. No affected versions or patches have been explicitly stated, and no vendor remediation level is provided.

Successful exploitation could lead to arbitrary code execution with the privileges of the current user, resulting in full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability requires no user interaction and has network attack vector, making it highly exploitable. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, organizations should monitor Adobe's advisories closely for updates and apply patches promptly once available.