CVE-2026-105781

The record

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

Affected packages

Related vulnerabilities

• CVE-2026-63224 OpenRemote is an open-source internet-of-things platform. CWE-89
• CVE-2026-62849 ThingLinks is an enterprise IoT platform. CWE-89
• CVE-2026-61620 HoneySQL turns Clojure data structures into SQL. CWE-89
• CVE-2026-39732 Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions. CWE-89
• CVE-2026-119619 A vulnerability was found in 37954679 cak-filemanagement-system up to… CWE-89
• CVE-2026-115820 The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for… CWE-89
• CVE-2026-119656 CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection… CWE-89
• CVE-2026-119655 CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the… CWE-89