CVE-2026-76193
CriticalCVSS 10.0Summary
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Risk Assessment
The risk to the organization includes the possibility of remote code execution in the user context, which could lead to system compromise or data theft. The lack of required user interaction increases the risk of automated attacks.
Recommendation
It is recommended to immediately apply patches provided by Adobe for Adobe Campaign Classic. Also monitor logs for unusual SSRF requests and restrict access to the system.
Original NVD description (English source)
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.