CVE-2026-104350 Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-104350?
CVE-2026-104350 is a critical vulnerability in Adobe Campaign Classic, published on 27 Oct 2026.
Official description
Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Weakness: CWE-79
Which versions are affected by CVE-2026-104350?
How do I fix CVE-2026-104350?
No fix has been published for CVE-2026-104350 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-104350 being exploited?
There is no known exploitation of CVE-2026-104350 in the wild and no public exploit code.
Sources
Also known as GHSA-mcf8-5pc2-3wxx.