9.9Critical
CVE-2026-82013Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
Description
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
Weakness (CWE):
CWE-918
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Adobe | Adobe Campaign Classic | ≤ 7.4.4 build 9401, fixed 7.4.4 build 9402 | |
| adobe | campaign | ≤ 7.4.3 |
References and patches
- https://helpx.adobe.com/security/products/campaign/apsb26-142.html vendor-advisoryVendor Advisory
CPE matches (NVD) (3)
cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*≤ 7.4.3cpe:2.3:a:adobe:campaign:7.4.4:9400:*:*:classic:*:*:*cpe:2.3:a:adobe:campaign:7.4.4:9401:*:*:classic:*:*:*