{"id":"CVE-2026-82010","published":"2026-09-22T18:17:21.377","lastModified":"2026-09-23T20:29:24.187","description":"Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-89"],"vendors":["adobe","linux","microsoft"],"products":["campaign","linux kernel","windows"],"references":[{"url":"https://helpx.adobe.com/security/products/campaign/apsb26-142.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows an attacker to execute arbitrary code by injecting malicious SQL commands, posing a significant risk to the system's security.","exploitability":"Exploitation is relatively straightforward given the low privilege requirement and the lack of user interaction needed.","blast_radius":"If exploited, the attacker could gain full control over the system, leading to data loss, system compromise, and potential lateral movement.","remediation":"Upgrade to Adobe Campaign Classic 8.2.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","sql-injection","web","patch"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-27T08:47:11.306Z"}}