GCVE-110-NCSC-2026-278

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published August 6, 2026

Adobe Campaign Classic (ACC) contains a Server-Side Request Forgery (SSRF) vulnerability that enables privilege escalation without user interaction, with an altered scope of impact.

Download JSON Open in Console

Weaknesses (CWE)

CWE-918Server-Side Request Forgery (SSRF)CWE-1336Improper Neutralization of Special Elements Used in a Template EngineCWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-863Incorrect AuthorizationCWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

Risk Scores

CVSS 3.1

10.0/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Adobe	vers:unknown/*	—	—

Aliases

CVE-2026-48317 CVE-2026-48323 CVE-2026-48326 CVE-2026-48330 CVE-2026-48331 CVE-2026-48333 CVE-2026-48399

References

advisory

Browse GCVE Records

67,606 records in the GCVE database · Updated August 12, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON