AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-48331

Adobe Campaign Classic: server-side request forgery

Adobe

CVE-2026-48331 · Published Aug 3, 2026 · updated Aug 28, 2026

Critical10.0
No fix yet
Adobe advisory

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Affected versions

PackageAffectedFixed in
Adobe Campaign Classic
Product
<= ACC v7: 7.4.3 build 9398No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More Adobe advisories

All Adobe
Critical 10.0Aug 3Adobe Campaign Classic: code executionCVE-2026-48323no fix yetCritical 9.9Aug 3Adobe Campaign Classic: SQL injectionCVE-2026-48326no fix yetCritical 10.0Aug 3Adobe Campaign Classic: SQL injectionCVE-2026-48330no fix yetCritical 9.8Aug 3Adobe Campaign Classic: improper authorizationCVE-2026-48333no fix yetHigh 7.5Aug 3Adobe Campaign Classic: security feature bypassCVE-2026-48399no fix yetCritical 9.6Aug 3Adobe Campaign Classic: code executionCVE-2026-48317no fix yet