CVE-2026-48448

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issue does not require user interaction. Scope is changed.

• CWE-89

• https://helpx.adobe.com/security/products/campaign/apsb26-114.htmlVendor Advisory

Published

Jul 30, 2026

Last Modified

Aug 5, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48442CAI Content Credentials is affected by an Improper Limitatio…7.1
• CVE-2026-48443CAI Content Credentials is affected by an Uncontrolled Resou…6.2
• CVE-2026-48444CAI Content Credentials is affected by an Integer Overflow o…6.2
• CVE-2026-48445CAI Content Credentials is affected by an Integer Overflow o…6.2
• CVE-2026-48446CAI Content Credentials is affected by an Improper Limitatio…5.5
• CVE-2026-48447Lightroom Classic is affected by an Incorrect Authorization …7.7
• CVE-2026-48449Adobe Campaign Classic (ACC) is affected by an Incorrect Aut…10
• CVE-2026-4845A flaw has been found in dameng100 muucmf 1.9.5.20260309. Im…4.3
• CVE-2026-4846A vulnerability has been found in dameng100 muucmf 1.9.5.202…4.3
• CVE-2026-4847A vulnerability was found in dameng100 muucmf 1.9.5.20260309…4.3
• CVE-2026-4848A vulnerability was determined in dameng100 muucmf 1.9.5.202…4.3
• CVE-2026-48480The netty incubator codec.bhttp is a java language binary ht…6.6