Threat Intelligence

Adobe Patches Critical Flaws in Campaign Classic and Connect: What Businesses Should Do

The Hacker News · 28 Oct 2026

Key Takeaway Check whether your business uses Adobe Campaign Classic or Adobe Connect, and apply the latest updates promptly even though no attacks have been reported.

Adobe has released patches for eight critical security flaws in Campaign Classic. If successfully exploited, these issues could allow attackers to run their own code on a system (known as arbitrary code execution), bypass security features, or gain higher levels of access than they should have (privilege escalation).

The flaws affect Adobe Campaign Classic version 7.4.4 build 9402 and earlier, on both Windows and Linux. Adobe has fixed them in version 7.4.4 build 9403, so any business running an older build should plan to update.

Adobe also fixed a separate critical code injection flaw in Adobe Connect Desktop and Mobile, which runs on Windows, macOS and Android. Tracked as CVE-2026-48360, it carries a CVSS score of 9.6 and could also result in arbitrary code execution. Adobe has released fixed versions for this product as well.

Adobe said it is not aware of any exploits in the wild for any of the issues addressed in this update. Even so, users are advised to move to the latest versions for the best protection, since attackers often study patches once they are public.

Adobe Patch Management Vulnerability Code Execution

Summarised by CISO AI from The Hacker News, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.