CVE-2026-84395 is a Server-Side Request Forgery (SSRF) vulnerability in Adobe Premiere Pro that allows an attacker to induce the server to make unintended requests. Exploitation does not require user interaction and can result in privilege escalation. The vulnerability affects versions up to 26.3.2 and 25.6.5. The scope is changed, meaning the vulnerability impacts components beyond the originally vulnerable part. The CVSS v3.1 score is 7.1, indicating a high severity with low attack complexity and no required privileges or user interaction.

Successful exploitation of this SSRF vulnerability can lead to privilege escalation within the affected Adobe Premiere Pro environment. This increases the attacker's capabilities beyond initial access, potentially allowing unauthorized actions at a higher privilege level. The vulnerability does not impact confidentiality but has a high impact on integrity. Availability is not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Adobe's security advisories for updates. Until a fix is available, consider restricting network access for the affected application to limit SSRF exploitation potential.