CVE-2026-105779

Summary

Adobe Campaign Classic contains an SQL injection vulnerability (CWE-89) that allows a low-privileged attacker to bypass security controls and gain unauthorized read and limited write access without user interaction.

Exploitability

Exploitation requires only low-privileged network access and no user interaction, but the exact attack vector is not disclosed.

Blast radius

Successful exploitation could lead to exposure of sensitive campaign data and limited modification capabilities within the application’s database scope.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Adobe Campaign Classic version 2.590 or later, as this is the first fixed version addressing CVE-2026-105779.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.