CVE-2026-48331 Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
CriticalCVSS 10.0
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Campaign Classic | <= ACC v7: 7.4.3 build 9398 | No fix listed |
| Adobe campaign | <= 7.4.2 | No fix listed |
| Adobe campaign | = 7.4.3-9394 | No fix listed |
| Adobe campaign | = 7.4.3-9396 | No fix listed |
| Adobe campaign | = 7.4.3-9397 | No fix listed |
| Adobe campaign | = 7.4.3-9398 | No fix listed |
References
- helpx.adobe.com vendor-advisory