Critical severity10.0NVD Advisory· Published Jun 9, 2026· Updated Aug 28, 2026
CVE-2026-47938
CVE-2026-47938
Description
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Affected products
3- Range: <=7.4.3 build 9394
cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*+ 1 more
- cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*range: <=7.4.2
- cpe:2.3:a:adobe:campaign:7.4.3:9394:*:*:classic:*:*:*
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/campaign/apsb26-66.htmlnvdVendor Advisory
News mentions
1- Adobe Discloses 25 Vulnerabilities Across Multiple Products, Including Critical FlawsVypr Intelligence · Jun 9, 2026