Adobe-Campaign-Classic on CuraSechttps://curasec.metacog.co.kr/tags/adobe-campaign-classic/Recent content in Adobe-Campaign-Classic on CuraSecHugoen-usWed, 28 Oct 2026 17:09:30 +0000Adobe Patches 8 Critical Campaign Classic RCE and Privilege Escalation Flawshttps://curasec.metacog.co.kr/insights/2026-10-28-adobe-fixes-8-critical-campaign-classic-flaws-allowing-code/Wed, 28 Oct 2026 17:09:30 +0000https://curasec.metacog.co.kr/insights/2026-10-28-adobe-fixes-8-critical-campaign-classic-flaws-allowing-code/<ul> <li><strong>Engineer — Act:</strong> A public PoC on GitHub for a CVSS 9.9 code injection flaw (CVE-2026-104351) makes exploitation pressure real despite the low EPSS; patch Adobe Campaign Classic to the latest released version immediately.</li> <li><strong>SOC/IR — Plan:</strong> With a public PoC available, build or tune detections for exploitation attempts against Campaign Classic endpoints — look for anomalous process spawning or outbound connections from the Campaign Classic application process.</li> <li><strong>Leader — Skip</strong></li> <li><strong>Signals:</strong> CVE-2026-104351 — CISA KEV: not listed, EPSS 0.01, public PoC on GitHub</li> </ul>