Search/CVE-2026-105779
● CVE — Critical

CVE-2026-105779

DiscoveredOct 27, 2026UpdatedOct 28, 2026

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS v3.1
9.1 CRITICAL
EPSS
0.29%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
1
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
Connections
2 relationships
Timeline
disclosure → media coverage
Oct 27, 2026
Disclosure — published as a CVE record.
Oct 28, 2026
thehackernews.com reports: Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass