EXPOSURES › CVE-2026-82443
CVE-2026-82443
CRITICALAdobe Campaign Classic suffers from an SSRF vulnerability allowing privilege escalation without user interaction.
An attacker can exploit this SSRF flaw to escalate privileges and access internal resources without needing user interaction, posing a severe risk to organizations using Adobe Campaign Classic. DIBs must ensure this is patched immediately to prevent unauthorized access and maintain compliance with security requirements.
Shame score — A critical SSRF vulnerability enabling privilege escalation without user interaction indicates a significant avoidable security gap in Adobe's product.
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
| PRODUCT | STATUS |
|---|---|
| Adobe Acrobat Sign for Government Adobe |
Authorized |
| Adobe Analytics Adobe |
Authorized |
| Adobe Campaign Adobe |
Authorized |
| Adobe Connect Managed Services (ACMS-GC) Adobe |
Authorized |
| Adobe Creative Cloud for Enterprise Adobe |
Authorized |
| Adobe Document Cloud (PDF Services & Adobe Sign) Adobe |
Authorized |
| Adobe Experience Manager Managed Services (AEMMS-GC) Adobe |
Authorized |
| Adobe Learning Manager Adobe |
Authorized |
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |