CVE-2026-47938
Received Received - Intake
Adobe Campaign Classic Server-Side Request Forgery Vulnerability

Publication date: 2026-06-09

Last updated on: 2026-06-09

Assigner: Adobe Systems Incorporated

Description
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-09
Last Modified
2026-06-09
Generated
2026-06-10
AI Q&A
2026-06-10
EPSS Evaluated
N/A
NVD
CVE-2026-47938
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
adobe campaign_classic to 7.4.4 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) issue found in Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier. It allows an attacker to make the server perform unauthorized requests, which can lead to arbitrary code execution within the context of the current user. Notably, exploiting this vulnerability does not require any user interaction.

Impact Analysis

The impact of this vulnerability is severe. An attacker can execute arbitrary code on the affected system without needing any user interaction, potentially gaining control over the system or accessing sensitive data. The vulnerability has a maximum CVSS base score of 10.0, indicating critical severity with high impact on confidentiality, integrity, and availability.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47938. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart