CVE-2026-82008 is an improper input validation vulnerability (CWE-20) in Adobe Campaign Classic. This flaw enables an attacker with low privileges to execute arbitrary code in the context of the current user. The vulnerability does not require user interaction to be exploited and changes the security scope, potentially allowing elevated impact. The CVSS v3.1 base score is 9.9, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, changed scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially resulting in full compromise of the affected system or application environment. The vulnerability's changed scope indicates that the attacker may gain higher privileges or broader access than initially permitted.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict access to Adobe Campaign Classic instances and monitor for suspicious activity related to this vulnerability.