CVE-2026-82009 is an SQL Injection vulnerability in Adobe Campaign Classic caused by improper neutralization of special elements in SQL commands (CWE-89). An attacker with high privileges can exploit this flaw to execute arbitrary SQL commands, potentially resulting in arbitrary code execution. The vulnerability does not require user interaction and changes the security scope, indicating a significant impact on confidentiality, integrity, and availability.

Successful exploitation can lead to full compromise of the affected Adobe Campaign Classic instance, including arbitrary code execution with the privileges of the current user. The vulnerability affects confidentiality, integrity, and availability of the system. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor Adobe advisories for updates and apply patches once available. Until then, restrict high-privilege access and apply compensating controls as feasible.