CVE-2026-73369

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

• CWE-94

• https://helpx.adobe.com/security/products/campaign/apsb26-142.htmlVendor Advisory

Published

Sep 22, 2026

Last Modified

Sep 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-73362Unauthenticated Cross Site Scripting (XSS) in URL Shortify <…7.1
• CVE-2026-73363Unauthenticated Broken Access Control in Taxi Booking Manage…6.5
• CVE-2026-73364Customer PHP Object Injection in Flexible Subscriptions <= 1…9.8
• CVE-2026-73365Unauthenticated SQL Injection in JetAppointment <= 2.5.2 ver…9.3
• CVE-2026-73366Unauthenticated PHP Object Injection in Easy Google Maps <= …9.8
• CVE-2026-73367Unauthenticated Remote File Inclusion in Easy Google Maps < …7.2
• CVE-2026-7337Type Confusion in V8 in Google Chrome prior to 147.0.7727.13…8.8
• CVE-2026-73370Incorrect Authorization vulnerability in Apache Syncope. …9.8
• CVE-2026-73371Joomla! Core - [20260808] - Improper ACL checks for batch co…4.3
• CVE-2026-73372Joomla! Core - [20260809] - Improper ACL checks when injecti…4.3
• CVE-2026-73373Joomla! Core - [20260810] - Unrestricted uploads of SHTML fi…9.8
• CVE-2026-73374A stored cross-site scripting (XSS) vulnerability existed in…6.1