VulnSocial

CVE-2026-48381Patch(adobe / campaign)

LOWCVSS 9.0 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch adobe campaign systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

adobe CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • campaign

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • 2 total mentions across 1 day

Affected systems

Vendors
adobe
Products
campaign

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-12: 2Patch / Workaround · 2026-08-12: 2Technical Details · 2026-08-12: 208-12
Signal classification1 categories
Patch
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • TECHEPAGES@techepages
    Patch

    Adobe has released patches for 50+ vulnerabilities, including critical flaws in ColdFusion (CVE-2026-48362, CVE-2026-48273, CVE-2026-71384) and Campaign Classic (CVE-2026-71398, CVE-2026-27302, CVE-2026-48381). These issues could enable arbitrary code execution or DoS. Commerce updates also address privilege escalation (CVE-2026-71362). With Priority 1 ratings, immediate patching is strongly advised.

    Post summary

    Adobe issued patches for over 50 critical vulnerabilities, including those affecting ColdFusion and Campaign Classic, which could enable arbitrary code execution, DoS, or privilege escalation – immediate remediation is advised.

    0001060
    38 followersView on X
  • kawn@kawn2020
    Patch

    #securityupdate #adobeupdate #adobe #CampaignClassic Adobe から，Campaign Classic で更新をリリース． 適用優先度「1」，緊急度には「Critical」 3 件（うち CVSS 10.0 2 件）が含まれる． ・CVE-2026-27302（CVSS 10.0） ・CVE-2026-71398（ 〃 ） ・CVE-2026-48381 https://x.com/kawn2020/status/2087451212627255511

    Post summary

    Adobe issued a critical patch for Campaign Classic covering three CVEs, including two with CVSS 10.0 scores, but provides no evidence of active exploitation or PoC.

    0000047
    90 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appadobecampaign---

Explore more

Back to dashboardadobe CVEscampaign vulnerabilities