CVE-2026-75703 is an Improper Control of Generation of Code ('Code Injection') vulnerability in Adobe Campaign Classic. It enables an attacker to execute arbitrary code remotely without requiring user interaction. The vulnerability affects the product in a way that changes the security scope, allowing high-impact consequences including complete confidentiality, integrity, and availability compromise. The CVSS v3.1 base score is 10.0, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and scope changed.

Successful exploitation results in arbitrary code execution with the privileges of the current user, potentially leading to full system compromise including confidentiality, integrity, and availability impacts. The vulnerability does not require user interaction and can be exploited remotely, increasing the risk of widespread impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, monitor Adobe advisories for updates and consider applying compensating controls if possible.