CVE-2026-48330
CriticalCVSS 10.0Summary
Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability that could lead to arbitrary code execution in the context of the current user. An attacker can execute arbitrary SQL commands, potentially gaining elevated access. Exploitation does not require user interaction, and the scope is changed.
Risk Assessment
An attacker can execute arbitrary SQL code, potentially leading to full control of the application and access to sensitive data.
Recommendation
Apply the patch provided by Adobe for Adobe Campaign Classic.
Original NVD description (English source)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the application. Exploitation of this issue does not require user interaction. Scope is changed.