- Engineer — Act: A public PoC on GitHub for a CVSS 9.9 code injection flaw (CVE-2026-104351) makes exploitation pressure real despite the low EPSS; patch Adobe Campaign Classic to the latest released version immediately.
- SOC/IR — Plan: With a public PoC available, build or tune detections for exploitation attempts against Campaign Classic endpoints — look for anomalous process spawning or outbound connections from the Campaign Classic application process.
- Leader — Skip
- Signals: CVE-2026-104351 — CISA KEV: not listed, EPSS 0.01, public PoC on GitHub