CVE-2026-82013

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

• CWE-918

• https://helpx.adobe.com/security/products/campaign/apsb26-142.htmlVendor Advisory

Published

Sep 22, 2026

Last Modified

Sep 26, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82007Photoshop Desktop is affected by an Integer Overflow or Wrap…7.8
• CVE-2026-82008Adobe Campaign Classic (ACC) is affected by an Improper Inpu…9.9
• CVE-2026-82009Adobe Campaign Classic (ACC) is affected by an Improper Neut…9.1
• CVE-2026-8201A use-after-free vulnerability exists in MongoDB's Field-Lev…8.8
• CVE-2026-82010Adobe Campaign Classic (ACC) is affected by an Improper Neut…9.9
• CVE-2026-82011Adobe Campaign Classic (ACC) is affected by an Improper Neut…9.1
• CVE-2026-82017IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 con…7.6
• CVE-2026-82018IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 1…6.1
• CVE-2026-82019TripleLift's ad rendering script (video-bundle.js) contains …4.2
• CVE-2026-8202Using a densely populated chars mask and a large input strin…6.5
• CVE-2026-82020Hermes Agent 0.16.0 prior to 0.17.0 contains an improper pat…6.8
• CVE-2026-82021Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain …8.3