CVE-2026-73369 describes an improper control of code generation vulnerability in Adobe Campaign Classic. This code injection flaw enables an attacker to execute arbitrary code within the context of the current user. The vulnerability does not require any user interaction for exploitation and changes the security scope, indicating a significant impact on system security. The CVSS v3.1 base score is 10.0, reflecting critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation results in arbitrary code execution with the privileges of the current user, potentially leading to full compromise of the affected system. The vulnerability affects confidentiality, integrity, and availability at a high level. Since no user interaction is required and the scope is changed, the risk of remote exploitation is critical.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, monitor Adobe's security advisories for updates. Until a patch is available, consider applying workarounds recommended by Adobe if any are published.