CVE-2026-75721 is an improper control of generation of code vulnerability (CWE-94) in Adobe Campaign Classic. This flaw enables an attacker to inject and execute arbitrary code in the context of the current user without requiring any user interaction. The vulnerability changes the security scope, potentially allowing broader impact. The CVSS 3.1 base score is 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, no privileges or user interaction needed, scope change, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to complete compromise of the affected system under the current user's privileges, including full control over confidentiality, integrity, and availability of the system. The vulnerability does not require user interaction and can be exploited remotely, increasing the risk of widespread impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, organizations should monitor Adobe advisories closely and consider applying any recommended temporary mitigations once published.