Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4345 articles · 196293 vulns · 36/41 feeds (7d)
← Back to list
8.6
CVE-2026-48448PATCHED
adobe · adobe campaign classic

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Description

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issue does not require user interaction. Scope is changed.

Affected Products

VendorProductVersions
adobeadobe campaign classic0

References

  • https://helpx.adobe.com/security/products/campaign/apsb26-114.html(vendor-advisory)

Related News (2 articles)

Tier D
Heise Security20d ago
Kritische Schadcode-Sicherheitslücke bedroht Adobe Campaign Classic
→ No new info (linked only)
Tier C
VulDB24d ago
CVE-2026-48448 | Adobe Campaign Classic sql injection
→ No new info (linked only)
CVSS 3.18.6 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CISA KEV❌ No
Actively exploited❌ No
Patch available
7.4.3 build 9398
CWECWE-89
PublishedJul 30, 2026
Trending Score5
Source articles2
Independent2
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-71362
Adobe Commerce | Incorrect Authorization (CWE-863)
Trending: 23
CRITICALCVE-2026-48362
ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Trending: 20
HIGHCVE-2026-48414
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Trending: 16
HIGHCVE-2026-48416
Adobe Commerce | Incorrect Authorization (CWE-863)
Trending: 16
HIGHCVE-2026-48413
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Trending: 15

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jul 30, 2026
Discovered by ZDM
Jul 30, 2026
Patch Available
Aug 3, 2026