CVE-2026-83660

Summary

The vulnerability allows an attacker to forge server-side requests, potentially leading to privilege escalation without user interaction. This flaw is critical as it can be exploited to gain unauthorized access to sensitive systems.

Exploitability

Exploitation is straightforward as it does not require user interaction, making it highly exploitable. Precondition is the presence of the vulnerable version of Adobe Campaign Classic (ACC).

Blast radius

If exploited, the impact could be severe, as it could lead to full system compromise and unauthorized access to sensitive data and resources.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Adobe Campaign Classic (ACC) 12.1.1.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.