Loading vulnerability…
SQL Injection in Adobe Campaign Classic
CVE-2026-105779 is an SQL injection vulnerability in Adobe Campaign Classic 7.4.4 build 9402 and earlier on Windows and Linux. Improper neutralization of special elements in SQL commands allows a low-privileged attacker to bypass security controls and obtain unauthorized read and limited write access. Exploitation is network-based, has low attack complexity, and requires no user interaction. The vulnerability has a CVSS v3.1 score of 9.1 with changed scope.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can expose confidential information and permit limited unauthorized modification of data. The CVSS v3.1 assessment indicates high confidentiality impact, low integrity impact, and low availability impact, with effects extending beyond the vulnerable component's security authority.
Patch, then assume compromise.
Upgrade Adobe Campaign Classic to version 7.4.4 build 9403 or a later fixed release on Windows and Linux. Apply the security update in accordance with Adobe security bulletin APSB26-162.
No public exploits tracked yet. Mallory keeps watching.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.