Live › vulnerability › CVE-2026-105779
Go to dashboardAdobe Campaign Classic has an SQL injection flaw that lets a low-privileged attacker bypass security controls. The attacker can read data and make limited writes to the database without user interaction.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Adobe Campaign Classic | vendor | unknown | – |
7.4.4 build 9403, the latest security build7.4.4 build 9403 or later) and restart nlserver; unconfirmed that it contains this fixEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.
This page as .md · .json · in your agent: get_signal("CVE-2026-105779")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.