Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Adobe Campaign Classic lets attackers run code on your server

CVE-2026-76193 · published 9 days ago
Summary

Adobe Campaign Classic can be tricked into contacting internal systems and running whatever code an attacker supplies. This can happen without any user clicking anything, giving the attacker control over the server while they are logged in. Apply the vendor’s update or patch as soon as possible to stop the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe adobe campaign classic <= ACC v7: 7.4.4 build 9400
Original advisory text
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
References
Severity
10.0 Critical
CVSS 3.1: 10.0 (MITRE)
Exploitation
EPSS <1%
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published25 Aug 2026
Updated3 Sep 2026
First seen25 Aug 2026
Sources
CVE-2026-76193 · NVD
CVE-2026-76193 · MITRE
Monitor software like this
Free during beta