CVE Catalog

CVE-2026-82009

CriticalCVSS 9.1
Published: Updated: Translated: NVD NIST

Summary

Adobe Campaign Classic is affected by an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. An attacker with high privileges could execute arbitrary SQL commands in the context of the current user. Exploitation does not require user interaction.

Risk Assessment

The vulnerability allows execution of arbitrary SQL commands, potentially leading to data disclosure, database modification, or further privilege escalation. The risk is high, although it requires a highly privileged account.

Recommendation

Immediately apply security updates for Adobe Campaign Classic and implement parameterized SQL queries. Also limit the number of highly privileged accounts and monitor database activity.

Other vulnerabilities in Adobe Campaign Classic

See all
Original NVD description (English source)

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary SQL commands. Exploitation of this issue does not require user interaction. Scope is changed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS