CVE-2026-82011

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.

• CWE-89

• https://helpx.adobe.com/security/products/campaign/apsb26-142.htmlVendor Advisory

Published

Sep 22, 2026

Last Modified

Sep 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82006Photoshop Desktop is affected by a Heap-based Buffer Overflo…7.8
• CVE-2026-82007Photoshop Desktop is affected by an Integer Overflow or Wrap…7.8
• CVE-2026-82008Adobe Campaign Classic (ACC) is affected by an Improper Inpu…9.9
• CVE-2026-82009Adobe Campaign Classic (ACC) is affected by an Improper Neut…9.1
• CVE-2026-8201A use-after-free vulnerability exists in MongoDB's Field-Lev…8.8
• CVE-2026-82010Adobe Campaign Classic (ACC) is affected by an Improper Neut…9.9
• CVE-2026-82013Adobe Campaign Classic (ACC) is affected by a Server-Side Re…9.9
• CVE-2026-82017IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 con…7.6
• CVE-2026-82018IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 1…6.1
• CVE-2026-82019TripleLift's ad rendering script (video-bundle.js) contains …4.2
• CVE-2026-8202Using a densely populated chars mask and a large input strin…6.5
• CVE-2026-82020Hermes Agent 0.16.0 prior to 0.17.0 contains an improper pat…6.8