CVE-2026-82443

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

• CWE-918

• https://helpx.adobe.com/security/products/campaign/apsb26-142.htmlVendor Advisory

Published

Sep 22, 2026

Last Modified

Sep 23, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82435Description The worker's Netty message decoder is installed…9.8
• CVE-2026-82437Description The Logviewer offers `logs.users` and `logs.gro…4.3
• CVE-2026-82438Description Three separate mechanisms allowed a web page on…8.1
• CVE-2026-82439Description The DRPC server kept a map from function name t…9.8
• CVE-2026-8244A vulnerability was identified in Industrial Application Sof…5.5
• CVE-2026-82441Description A submitted topology carries two lists of blobs…9.1
• CVE-2026-82447Skyvern before 1.0.45 contains a sandbox escape vulnerabilit…8.8
• CVE-2026-82448Shinobi before commit 5a76c74f contains a hardcoded connecti…9.8
• CVE-2026-82449Cockpit CMS before 2.14.1 contains an account enumeration vu…5.3
• CVE-2026-8245Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS …5.4
• CVE-2026-82450BookStack before 26.05.4 contains a remote code execution vu…8.8
• CVE-2026-82451Formwork before 2.3.11 contains a stored cross-site scriptin…6.1