Search/CVE-2026-105489
● CVE — Critical

CVE-2026-105489

DiscoveredOct 27, 2026UpdatedOct 28, 2026

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS v3.1
9.9 CRITICAL
EPSS
0.48%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
1
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Connections
2 relationships
Timeline
disclosure → media coverage
Oct 27, 2026
Disclosure — published as a CVE record.
Oct 28, 2026
thehackernews.com reports: Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass