Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.0

Adobe Campaign Classic | Malicious SQL Code Execution Risk

CVE-2026-48381 · published 2 months ago
Summary

Adobe Campaign Classic is affected by a security flaw that could allow an attacker to execute malicious code on a server. This could lead to unauthorized access or data theft. Adobe and other vendors are working to fix the issue, and users should wait for a patch before taking action.

What to do
  • Update adobe campaign to version 7.4.4 or later.
Affected software
VendorProductAffected versions
adobe adobe campaign classic <= ACC v7: 7.4.3 build 9399
adobe campaign >= 7.2.1, < 7.4.4
cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*
Original advisory text
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in th...
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published11 Aug 2026
Updated4 Nov 2026
First seen11 Aug 2026
Sources
CVE-2026-48381 · NVD
CVE-2026-48381 · MITRE
Track software like this
Free during beta