CVE-2026-82443
Critical
9.9 CVSS v3.1
- Published
- Sep 22, 2026
- Updated
- Sep 23, 2026
- Vendor
- Adobe
- Affected versions
- See affected products
- Weakness
- CWE-918
Summary
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
Severity
Critical (9.9)CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
- Adobe Campaign <= 7.4.3
- Adobe Campaign 7.4.4
Exploitation status
Unknown
Technical details
Technical analysis has not been written for this record yet.
Mitigation & remediation
Follow the vendor advisory linked below for patches and workarounds.