CVE-2026-82443 PUBLISHED

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

Assigner: adobe
Reserved: 29.08.2026 Published: 22.09.2026 Updated: 22.09.2026

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS Score: 9.6

Product Status

Vendor Adobe
Product Adobe Campaign Classic
Versions Default: unaffected
  • affected from 0 to 7.4.4 build 9401 (incl.)
  • Version 7.4.4 build 9402 is unaffected

References

Problem Types

  • Server-Side Request Forgery (SSRF) (CWE-918) CWE