CVE-2026-76193: Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
Published Aug 25, 2026
·Updated
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
13 affected components
Adobe Adobe Campaign Classic (ACC)
All of the following
Any of the following
Adobe Campaign<=7.3.2
Adobe Campaign=7.4.1-9383
Adobe Campaign=7.4.2-9390
Adobe Campaign=7.4.2-9391
Adobe Campaign=7.4.3-9394
Adobe Campaign=7.4.3-9396
Adobe Campaign=7.4.3-9397
Adobe Campaign=7.4.3-9398
Adobe Campaign=7.4.3-9399
Adobe Campaign=7.4.4-9400
Any of the following
Linux Linux kernel
Microsoft Windows
Remediation
Event History
Aug 25, 2026
CVE Published
via MITRE·05:27 PM
Data Sourced
via MITRE·05:27 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable with low attack complexity, requires no privileges, and does not require user interaction.
2
What could successful exploitation allow?
Successful exploitation could enable arbitrary code execution in the context of the current user. The stated impact includes high confidentiality, integrity, and availability effects, with changed scope.