CVE Catalog

CVE-2026-82010

CriticalCVSS 9.9
Published: Updated: Translated: NVD NIST

Summary

Adobe Campaign Classic is affected by an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. A low-privileged attacker could execute arbitrary code in the context of the current user. Exploitation does not require user interaction.

Risk Assessment

The vulnerability enables remote code execution, potentially leading to full system compromise and application takeover. The risk is critical because it requires neither user interaction nor high privileges.

Recommendation

Immediately install security patches for Adobe Campaign Classic and implement parameterized SQL queries. Also audit account privileges and monitor for suspicious activity.

Other vulnerabilities in Adobe Campaign Classic

See all
Original NVD description (English source)

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS