AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-82013

Adobe Campaign Classic: server-side request forgery

Adobe

CVE-2026-82013 · Published Sep 22, 2026 · updated Sep 26, 2026

Critical9.9
No fix yet
Adobe advisory

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

Affected versions

PackageAffectedFixed in
Adobe Campaign Classic
Product
<= 7.4.4 build 9401No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More Adobe advisories

All Adobe
Medium 5.5Sep 22Adobe Content Credentials: integer overflowCVE-2026-89277no fix yetHigh 7.8Sep 22Adobe Substance3D - Modeler: out-of-bounds writeCVE-2026-83963no fix yetMedium 6.2Sep 22Adobe Connect: improper certificate validationCVE-2026-83964no fix yetHigh 7.1Sep 22Adobe Premiere: server-side request forgeryCVE-2026-84395no fix yetMedium 5.5Sep 22Adobe InDesign Desktop: null pointer dereferenceCVE-2026-84396no fix yetHigh 7.8Sep 22Adobe Substance3D - Modeler: out-of-bounds writeCVE-2026-81998no fix yet