CVE-2026-47938

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Score

CVSS 3.1 10.0 Critical

Status

Analyzed - psirt@adobe.com

Published

2026-06-09

Last modified

2026-08-27

Weaknesses

CWE-918

Affected products

• Adobe Campaign Classic (Adobe)
• Campaign (Adobe)

References

• https://helpx.adobe.com/security/products/campaign/apsb26-66.html