CVE-2026-82010 is a critical SQL Injection vulnerability in Adobe Campaign Classic caused by improper neutralization of special elements used in SQL commands (CWE-89). This flaw enables a low-privileged attacker to execute arbitrary code within the context of the current user without requiring any user interaction. The vulnerability affects Adobe Campaign Classic version 0 (as explicitly stated), and the scope of the vulnerability is changed, suggesting an impact beyond the initially targeted component. The CVSS v3.1 base score is 9.9, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, changed scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker with low privileges to execute arbitrary code in the context of the current user, potentially leading to full compromise of the affected system or application. The vulnerability does not require user interaction, increasing the risk of automated or remote exploitation. The changed scope indicates that the attack may affect resources beyond the initially vulnerable component, increasing the severity of the impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict access to Adobe Campaign Classic instances and monitor for suspicious activity related to SQL injection attempts. Follow Adobe's official advisories for updates and remediation instructions.