CVE-2026-48331

Analyzed Analyzed - Analysis Complete

Adobe Campaign Classic Server-Side Request Forgery Vulnerability

Publication date: 2026-08-03

Last updated on: 2026-08-06

Assigner: Adobe Systems Incorporated

Description

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-06

Generated

2026-08-24

AI Q&A

2026-08-04

EPSS Evaluated

2026-08-22

NVD

CVE-2026-48331

EUVD

EUVD-2026-52516

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	campaign	7.4.3
adobe	campaign	7.4.3
adobe	campaign	7.4.3
adobe	campaign	7.4.3
adobe	campaign	to 7.4.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to make server-side requests to unauthorized resources. This could lead to privilege escalation without requiring user interaction.

Detection Guidance

This vulnerability is a Server-Side Request Forgery (SSRF) in Adobe Campaign Classic. Detection requires monitoring network traffic for unusual outbound requests from the application server, especially to internal or restricted systems. Check logs for unexpected HTTP requests to localhost, internal IPs, or sensitive endpoints. Use network scanning tools like nmap to identify open ports on the Adobe Campaign server.

Impact Analysis

This vulnerability could allow an attacker to gain unauthorized access to sensitive data, execute arbitrary commands, or escalate privileges on the affected system. Since exploitation does not require user interaction, it poses a high risk for remote attacks.

Compliance Impact

This vulnerability could lead to unauthorized data access or disclosure, violating GDPR's data protection requirements and HIPAA's security rules. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Apply the latest security patches from Adobe for Adobe Campaign Classic immediately. Disable unnecessary network services and restrict outbound requests to trusted domains. Monitor network traffic for unusual SSRF patterns and review server logs for suspicious activity.

Hi! I’m here to help you understand CVE-2026-48331. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70