CVE-2026-48330SQL Injection in Adobe Campaign Classic
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the application. Exploitation of this issue does not require user interaction. Scope is changed.
View on NVDAnalysis
Adobe Campaign Classic presenta una vulnerabilidad crítica de inyección SQL que permite la ejecución de código arbitrario sin requerir interacción del usuario. Un atacante puede ejecutar comandos SQL para obtener acceso elevado o control total sobre la infraestructura de la aplicación. Al tener el puntaje máximo de severidad (CVSS 10.0), requiere atención inmediata por parte de los equipos que operan esta plataforma.
Relevant roles
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCWE-89EPSS
No EPSS score yet (CVE may be too fresh).
Technical description
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the application. Exploitation of this issue does not require user interaction. Scope is changed.