CVE-2026-75699 is an improper control of code generation vulnerability in Adobe Campaign Classic. This code injection flaw permits an attacker to execute arbitrary code in the context of the current user without any user interaction. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 10.0, indicating critical severity. The scope of the vulnerability is changed, meaning the impact extends beyond the initially vulnerable component. No patch or remediation details are available from the vendor at this time.

Successful exploitation could lead to arbitrary code execution with the privileges of the current user, potentially compromising system confidentiality, integrity, and availability. Since no user interaction is required, the attack vector is remote and highly exploitable. The changed scope indicates that the vulnerability affects components beyond the original security boundary.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to Adobe Campaign Classic installations and monitor for suspicious activity related to code execution attempts.