by Kastro
Paper/Archive/CVE-2026-82443

CVE-2026-82443

Adobe Adobe Campaign Classic — Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

EPSS 0.8%CVSS 9.9
critical.is priorityof 100
41
CVSS 9.9 (NVD)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 56.6.566 × 2011.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

Affected

ProductAffectedFixed inSource
Adobe Campaign Classic≤ 7.4.4 build 94017.4.4 build 9402CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
adobe (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryhelpx.adobe.com/security/products/campaign/apsb26-142.html