{"id":"CVE-2026-105779","kind":"vulnerability","aliases":["CVE-2026-105779"],"related":[],"title":"Adobe Campaign Classic: SQL injection lets low-privileged users read and write data","description":"Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.","summary":"Adobe Campaign Classic has an SQL injection flaw that lets a low-privileged attacker bypass security controls. The attacker can read data and make limited writes to the database without user interaction.","severity":"critical","cvss":9.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Campaign Classic","fixed":[],"affected":"unknown","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-campaign-classic","self-hosted","sql-injection","vendor"],"not_affected_if":["adobe-hosted"],"how_to_check":"Check build in Client Console Help > About (or nlserver). Adobe has not published affected builds for this CVE; compare against 7.4.4 build 9403, the latest security build. Adobe-hosted instances are remediated by Adobe.","fix":"Unknown for this CVE. Interim: upgrade on-premise/hybrid servers to the latest build (7.4.4 build 9403 or later) and restart nlserver; unconfirmed that it contains this fix.","status":"open","published_at":"2026-10-27T17:16:56+00:00","first_seen_at":"2026-10-27T17:32:45+00:00","triaged_at":"2026-10-27T17:34:18+00:00","updated_at":"2026-10-27T17:36:33+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-10-27T17:34:18Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Adobe Campaign Classic: SQL injection lets low-privileged users read and write data","impact":"high","summary":"Adobe Campaign Classic has an SQL injection flaw that lets a low-privileged attacker bypass security controls. The attacker can read data and make limited writes to the database without user interaction.","category":"vendor","nicknames":[],"who_cares":["adobe-campaign-classic","self-hosted"],"confidence":0.5,"needs_auth":"yes","worst_case":"low-privileged attacker reads database data and makes limited writes","analyst_note":"Find the Adobe security bulletin and affected ACC versions and patched builds; sources give only the NVD description and CVSS 9.1.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000507,"input_tokens":3359,"output_tokens":342,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the Adobe security bulletin and affected ACC versions and patched builds; sources give only the NVD description and CVSS 9.1.","search":"'-105779':17A,20A '-2026':16A,19A 'acc':71C 'access':117C 'adob':1A,25B,35B,68C 'adobe':21A 'adobe-campaign-class':24B 'affect':73C 'attack':49B,54B,101C 'bypass':50B,96C,107C 'campaign':2A,22A,26B,36B,69C 'chang':129C 'classic':3A,23A,27B,37B,70C 'command':85C 'control':52B 'could':90C,102C 'cve':15A,18A 'data':14A,57B 'databas':64B 'element':80C 'exploit':118C 'featur':95C 'flaw':42B 'gain':111C 'host':30B 'improp':76C 'inject':5A,33B,41B,87C 'interact':67B,126C 'issu':121C 'let':6A,44B 'leverag':103C 'limit':60B,115C 'low':8A,47B,99C 'low-privileg':7A,46B,98C 'make':59B 'measur':109C 'neutral':77C 'privileg':9A,48B,100C 'read':11A,56B,113C 'requir':124C 'result':91C 'scope':127C 'secur':51B,94C,108C 'self':29B 'self-host':28B 'special':79C 'sql':4A,32B,40B,84C,86C 'sql-inject':31B 'unauthor':112C 'use':81C 'user':10A,66B,125C 'vendor':34B 'vulner':88C,105C 'without':65B 'write':13A,61B,116C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T17:16:56+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105779","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105779","severity":null,"published_at":"2026-10-27T17:16:56+00:00","modified_at":"2026-10-27T17:16:56+00:00","first_seen_at":"2026-10-27T17:32:45+00:00","fetched_at":"2026-10-27T17:32:45+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-105779:896","url":null,"severity":null,"published_at":"2026-10-27T17:36:33+00:00","modified_at":"2026-10-27T17:36:33+00:00","first_seen_at":"2026-10-27T17:36:33+00:00","fetched_at":"2026-10-27T17:36:33+00:00","note":"No Adobe bulletin found for this CVE (checked helpx/Trust Center list, APSB26-142/134/123/120/114, release notes). Latest ACC security build is 7.4.4 build 9403 (2026-10-15, no bulletin linked); not tied to this CVE by Adobe. No exploitation known. Nothing verified; revisit when Adobe publishes the APSB."}],"documents":[{"id":7180,"url":"https://www.adobe.com/trust/security/products/campaign/apsb26-142.html","title":"APSB26-142 Adobe Campaign Classic (previous bulletin, sibling CVEs)","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":7181,"url":"https://experienceleague.adobe.com/en/docs/campaign-classic/using/release-notes/latest-release","title":"Adobe Campaign Classic v7 release notes (builds 9402, 9403)","kind":"release","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}