CVE-2026-82011

critical

Description

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.

References

https://helpx.adobe.com/security/products/campaign/apsb26-142.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-84656

Details

Source: Mitre, NVD

Published: 2026-09-22

Updated: 2026-09-24

Risk Information

CVSS v2

Base Score: 8

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Severity: Critical

EPSS

EPSS: 0.00555