{"vulnerability": "CVE-2026-89275", "sightings": [{"uuid": "bbd3d32e-3bc5-45fd-b7e4-25ca17195bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89275", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4ub3teai2b", "content": "CVE-2026-89275 - adobe campaign classic\nAdobe Campaign Classic can be tricked into running code that the attacker supplies, without needing any user to click anything. This could let an attacker take actions on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-09-22T18:30:04.606219Z"}, {"uuid": "5a8033d6-7742-4026-9578-6d08fe479ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89275", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw4w7brewb2k", "content": "\ud83d\udd34 CVE-2026-89275 - Critical (10)\n\nAdobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Inje...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89275/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-22T19:04:51.456281Z"}, {"uuid": "c34c7840-637e-49e3-8dc1-b47774bddd4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89275", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4zx3pfev2j", "content": "\ud83d\udea8 CVE-2026-89275 \u2014 CVSS 10 CRITICAL\n\nAdobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89275\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T20:11:51.553942Z"}, {"uuid": "b3712965-f703-4eec-a0ef-41b44847ad48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89275", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwadc7igr52l", "content": "\ud83d\udccc CVE-2026-89275 - Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary ... https://www.cyberhub.blog/cves/CVE-2026-89275", "creation_timestamp": "2026-09-24T03:37:07.916127Z"}, {"uuid": "60c5da7a-7539-4ea4-a0eb-4c3a10bafce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89275", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0393", "content": "", "creation_timestamp": "2026-09-23T23:43:17.000000Z"}, {"uuid": "66b93cbd-a99b-4a17-9eb6-e10b9fd528c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89275", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0393", "content": "Adobe heeft 18 kritieke kwetsbaarheden verholpen in Adobe Campaign Classic. De kwetsbaarheden betreffen onder meer code- en OS-command-injectie, SQL-injectie, onvoldoende autorisatie, onvoldoende invoervalidatie en Server-Side Request Forgery (SSRF). Alle 18 kwetsbaarheden zijn als kritiek aangemerkt en tien kunnen zonder authenticatie op afstand worden misbruikt. Succesvol misbruik kan onder meer leiden tot het uitvoeren van willekeurige code, privilege-escalatie, het omzeilen van beveiligingsmaatregelen, het uitlezen van bestanden en Denial-of-Service.\n\nDe kwetsbaarheden met kenmerk CVE-2026-82004, CVE-2026-73369, CVE-2026-84412, CVE-2026-89275, CVE-2026-75723, CVE-2026-75699, CVE-2026-75703 en CVE-2026-75721 hebben een CVSS-score van 10,0 en kunnen zonder authenticatie en gebruikersinteractie op afstand worden misbruikt. Voor zeven hiervan noemt Adobe willekeurige code-uitvoering als mogelijke impact. Voor CVE-2026-75703 noemt Adobe Denial-of-Service als impact.", "creation_timestamp": "2026-09-24T04:43:17.000000Z"}]}