VulnSocial

CVE-2026-47938Patch(adobe / campaign)

LOWCVSS 10.0 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch adobe campaign systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

adobe CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • campaign
  • linux_kernel
  • windows

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • Peaked at 2 mentions on most recent observed day (2026-06-10)
  • 3 total mentions across 2 days

Affected systems

Vendors
adobelinuxmicrosoft
Products
campaignlinux_kernelwindows

2 versions affected across 3 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-09: 1Mentions · 2026-06-10: 2Patch / Workaround · 2026-06-09: 1Patch / Workaround · 2026-06-10: 2Technical Details · 2026-06-09: 1Technical Details · 2026-06-10: 206-0906-10
Signal classification1 categories
Patch
3100.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-091
Patch1
2026-06-102
Patch2
Full discourse3 posts
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-47938 — CVSS 10/10 ██████████ Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF)... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/7ykDxUqvwm

    Post summary

    The tweet announces a critical SSRF vulnerability (CVE-2026-47938) in Adobe Campaign Classic and urges users to apply the available patch.

    1000085
    59 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    Adobe Campaign Classic: critical CVSS 10 SSRF. CVE-2026-47938 affects ACC v7.4.3 build 9394 and earlier and could result in privilege escalation. No auth required. Patch now. https://secalerts.co/vulnerability/CVE-2026-47938 https://t.co/96zaOtOLpW

    Post summary

    CVE-2026-47938 is a critical SSRF vulnerability in Adobe Campaign Classic v7.4.3 and earlier that allows privilege escalation without authentication, and a patch is available immediately.

    0000059
    832 followersView on X
  • ThreatCluster@threatcluster
    Patch

    Adobe and Microsoft released June 2026 security fixes addressing 331 vulnerabilities, including Adobe Campaign Classic CVE-2026-48303 and CVE-2026-47938 rated CVSS 10 and 38 high-severity Microsoft flaws, The Zero Day Initiative reported. https://threatcluster.io/cluster/adobe-and-microsoft-address-critical-vulnerabilities-in-june-24e25d26

    Post summary

    Adobe and Microsoft released patches for 331 vulnerabilities, including high‑severity CVEs, with no exploitation or PoC disclosed.

    0000048
    318 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
Appadobecampaign---
Appadobecampaign7.4.3--
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more

Back to dashboardadobe CVEslinux CVEsmicrosoft CVEscampaign vulnerabilities