CVE-2026-105781

{
  "etk_id": "ETK-2026-2781",
  "cve_id": "CVE-2026-105781",
  "display_id": "CVE-2026-105781",
  "ghsa_id": "GHSA-r3v6-wxx2-553x",
  "euvd_id": "EUVD-2026-111226",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SQL injection in Adobe Campaign Classic",
  "summary": "Adobe Campaign Classic is affected by an SQL injection flaw. An unauthenticated attacker may execute database commands and potentially run code in the context of the current user; no user interaction is required. The evidence does not identify affected releases or a fixed build.",
  "mitigation": "Apply Adobe's vendor update for this issue when the applicable fixed build is identified. Until then, reduce exposure by restricting network access to Campaign Classic to trusted systems and monitoring for unexpected database activity.",
  "vendor": "Adobe",
  "product": "Adobe Campaign Classic",
  "affected": [
    {
      "affected_notes": [
        ">= 0, <= 7.4.4 build 9402"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Adobe Campaign Classic",
      "purl": null
    }
  ],
  "cwes": [
    89
  ],
  "cvss_score": 10,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 15.790951133333333,
  "t0_at": "2026-10-27T17:03:34.741000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-27T17:03:34.741000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-27T17:03:34.741000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105781"
    }
  }
}