SQL Injection Vulnerability in Adobe Campaign Classic
CVE-2026-48381

9CRITICAL

Key Information:

Vendor

Adobe

Vendor
CVE Published:
11 August 2026

What is CVE-2026-48381?

Adobe Campaign Classic (ACC) is susceptible to an SQL Injection vulnerability, which allows attackers to manipulate SQL queries executed by the software. This severity enables individuals with malicious intent to potentially execute arbitrary code within the context of the current user session. Exploitation of this vulnerability can occur without requiring any user interaction, posing significant risks to organizational data integrity and security.

Affected Version(s)

Adobe Campaign Classic 0

Adobe Campaign Classic 0

Adobe Campaign Classic ACC v7: 7.4.4 build 9400

References

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.