CVE-2026-82011

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.

  • Published Sep 22, 2026
  • CVSS 9.1 critical
  • 0.6% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-82011 at the National Vulnerability Database