{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aadobecampaign_classic/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:adobe:campaign_classic:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-105781"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Campaign Classic"],"_cs_severities":["critical"],"_cs_tags":["sql-injection","rce","vulnerability"],"_cs_type":"advisory","_cs_vendors":["Adobe"],"content_html":"\u003cp\u003eAdobe Campaign Classic is affected by an SQL injection vulnerability (CVE-2026-105781) that permits an unauthenticated remote attacker to achieve arbitrary code execution in the context of the application user. This vulnerability carries a CVSS score of 10.0 and does not require user interaction. A proof-of-concept exploit is publicly available, increasing the risk of exploitation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows an unauthenticated attacker to execute arbitrary SQL commands and achieve arbitrary code execution. This could lead to full system compromise, data exfiltration, or complete loss of availability for the Campaign Classic environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eInventory all Adobe Campaign Classic instances within the environment.\u003c/li\u003e\n\u003cli\u003eApply the vendor-provided security updates documented in APSB26-162 immediately.\u003c/li\u003e\n\u003cli\u003eRestrict network access to the Campaign Classic administrative and API interfaces to known, trusted management segments until patching is complete.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-27T20:23:13Z","date_published":"2026-10-27T20:23:13Z","id":"https://feed.craftedsignal.io/briefs/2026-10-adobe-campaign-classic-sql-injection/","summary":"Adobe Campaign Classic is vulnerable to an unauthenticated SQL injection flaw (CVE-2026-105781) that allows for remote code execution, with public exploit code now available.","title":"Adobe Campaign Classic: SQL Injection remote code execution (CVE-2026-105781)","url":"https://feed.craftedsignal.io/briefs/2026-10-adobe-campaign-classic-sql-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:adobe:campaign_classic:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}