CVE-2026-71398 is an Incorrect Authorization vulnerability in Adobe Campaign Classic that permits arbitrary code execution in the context of the current user. The vulnerability does not require user interaction and changes the security scope, indicating a significant impact on system security. The CVSS v3.1 base score is 10.0, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. No official remediation or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation allows an unauthenticated attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The scope change indicates that the vulnerability could affect resources beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor Adobe's security advisories for updates. No temporary or official fixes have been documented at this time.