VulnSocial

CVE-2026-105781

LOWCVSS 10.0 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-27: 210-27
Referenced assets1 URL
Full discourse2 posts
  • Parameter Watch@ParameterWatch

    🚨 CVE-2026-105781 (10.0) 🚨 Adobe Campaign Classic lets anyone who can reach it run their own SQL commands, which Adobe says can lead to code execution. No affected versions or fixed release are listed for this one. https://t.co/KSdJTDT9Es

    1002067
    21 followersView on X
  • Severity Daily@severitydaily

    Adobe (@Adobe) scores the same Campaign Classic SQL injection 9.8 in its bulletin and 10.0 in its own CVE record, against an identical vector. Unauthenticated. No exploitation reported. https://severitydaily.com/adobe-campaign-classic-apsb26-162-cve-2026-105781-9-8-vs-10-0/

    0000032
    32 followersView on X

Explore more

Back to dashboard