CVE-2026-48448

{
  "id": "CVE-2026-48448",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-30T03:16:24.810",
  "lastModified": "2026-10-23T22:10:00.160",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issue does not require user interaction. Scope is changed."
    },
    {
      "lang": "es",
      "value": "Adobe Campaign Classic (ACC) está afectado por una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL (’inyección SQL’) que podría conducir a la divulgación de memoria sensible. Un atacante podría aprovechar esta vulnerabilidad para obtener acceso de lectura al sistema de archivos. La explotación de este problema no requiere interacción del usuario. El alcance ha cambiado."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Adobe Campaign Classic",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "7.4.3 build 9397",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "7.4.3 build 9398",
              "versionType": "custom",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
          "baseScore": 8.6,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 4.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-30T17:35:14.939309Z",
          "id": "CVE-2026-48448",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*",
              "versionEndIncluding": "7.4.2",
              "matchCriteriaId": "7B8DCC6A-0967-4897-94B8-DD22DA5AB841"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9394:*:*:classic:*:*:*",
              "matchCriteriaId": "A6BFE9C0-BB34-4769-B94E-14E637695679"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9396:*:*:classic:*:*:*",
              "matchCriteriaId": "E05FE070-A1F8-48B9-A15E-CB87E351E9E0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9397:*:*:classic:*:*:*",
              "matchCriteriaId": "1BA9BB73-939F-4A0B-B8F5-1942E17F2265"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:campaign:7.4.3:9398:*:*:classic:*:*:*",
              "matchCriteriaId": "7ADE87F6-3CA4-4E35-A125-23C2FB605A95"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://helpx.adobe.com/security/products/campaign/apsb26-114.html",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}