CVE-2026-48448 is an SQL Injection vulnerability in Adobe Campaign Classic caused by improper neutralization of special elements in SQL commands. Exploitation can disclose sensitive memory and grant file system read access. The attack requires no user interaction and changes the security scope. The CVSS 3.1 base score is 8.6 (High), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, scope changed, and high confidentiality impact. No remediation level or patch information is currently available.

Successful exploitation can lead to unauthorized disclosure of sensitive memory contents and file system read access, compromising confidentiality. There is no impact on integrity or availability. The vulnerability can be exploited remotely without authentication or user interaction, increasing risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor Adobe's security advisories for updates. No vendor-provided mitigation or temporary fix information is currently available.