9.9Kritisch
CVE-2026-82013Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
Beschreibung
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
Schwachstellentyp (CWE):
CWE-918
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Adobe | Adobe Campaign Classic | ≤ 7.4.4 build 9401, fixed 7.4.4 build 9402 | |
| adobe | campaign | ≤ 7.4.3 |
Referenzen und Patches
- https://helpx.adobe.com/security/products/campaign/apsb26-142.html vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (3)
cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*≤ 7.4.3cpe:2.3:a:adobe:campaign:7.4.4:9400:*:*:classic:*:*:*cpe:2.3:a:adobe:campaign:7.4.4:9401:*:*:classic:*:*:*