CVE-2026-48326
CriticalCVSS 9.9Summary
Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability that could lead to arbitrary code execution in the context of the current user. A low-privileged attacker can exploit this to execute arbitrary code. Exploitation does not require user interaction, and the scope is changed.
Risk Assessment
Even a low-privileged attacker can execute arbitrary code, potentially leading to privilege escalation and full control of the application.
Recommendation
Apply the patch provided by Adobe for Adobe Campaign Classic.
Original NVD description (English source)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.