AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-76193

Adobe Campaign Classic: server-side request forgery

Adobe

CVE-2026-76193 · Published Aug 25, 2026 · updated Sep 1, 2026

Critical10.0
No fix yet
Adobe advisory

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Affected versions

PackageAffectedFixed in
Adobe Campaign Classic
Product
<= ACC v7: 7.4.4 build 9400No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More Adobe advisories

All Adobe
Critical 10.0Aug 25Adobe Campaign Classic: command injectionCVE-2026-76197no fix yetMedium 5.5Aug 25Adobe C2PA Tool: improper input validationCVE-2026-76198no fix yetHigh 7.8Aug 25Adobe Substance3D - Painter: untrusted search pathCVE-2026-75768no fix yetHigh 7.8Aug 25Adobe Substance3D - Painter: heap buffer overflowCVE-2026-75769no fix yetHigh 7.8Aug 25Adobe Substance3D - Painter: out-of-bounds writeCVE-2026-75770no fix yetMedium 6.2Aug 25Adobe C2PA Tool: integer overflowCVE-2026-76189no fix yet