CVE-2026-47938: Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

Severity: critical (CVSS 10.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-09 · updated 2026-08-28
Weakness: CWE-918

Description

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Affected products

Adobe Campaign Classic: through 7.4.2; 7.4.3-9394

References

https://helpx.adobe.com/security/products/campaign/apsb26-66.html

Get alerted when CVE-2026-47938 or the next vulnerability affects your stack