CVE-2026-48448: Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48448?
CVE-2026-48448 has a severity rating of 8.6, which is considered high.
How do I fix CVE-2026-48448?
To mitigate CVE-2026-48448, update Adobe Campaign Classic to the latest version provided by Adobe.
What kind of attack is associated with CVE-2026-48448?
CVE-2026-48448 is associated with SQL Injection attacks that can lead to unauthorized file system access.
What could happen if CVE-2026-48448 is exploited?
Exploitation of CVE-2026-48448 could result in the disclosure of sensitive information from memory.
Which software is affected by CVE-2026-48448?
CVE-2026-48448 affects Adobe Campaign Classic (ACC) software.