Critical severity10.0NVD Advisory· Published Aug 3, 2026· Updated Aug 28, 2026
CVE-2026-48331
CVE-2026-48331
Description
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Affected products
6cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*+ 4 more
- cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*range: <=7.4.2
- cpe:2.3:a:adobe:campaign:7.4.3:9394:*:*:classic:*:*:*
- cpe:2.3:a:adobe:campaign:7.4.3:9396:*:*:classic:*:*:*
- cpe:2.3:a:adobe:campaign:7.4.3:9397:*:*:classic:*:*:*
- cpe:2.3:a:adobe:campaign:7.4.3:9398:*:*:classic:*:*:*
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/campaign/apsb26-120.htmlnvdVendor Advisory
News mentions
1- Critical Adobe Campaign Classic Vulnerabilities Enables Arbitrary Code ExecutionCyber Security News · Aug 4, 2026