CVE-2026-76193: Server-Side Request Forgery (SSRF) (CWE-918) in Adobe Adobe Campaign Classic

CVE-2026-76193 is a Server-Side Request Forgery (SSRF) vulnerability in Adobe Campaign Classic that enables an attacker to execute arbitrary code without requiring user interaction. The vulnerability affects the product in a way that changes the security scope, potentially allowing code execution with the privileges of the current user. The vulnerability is tracked by the Nationaal Cyber Security Centrum under advisory NCSC-2026-0331 and is part of a set of related CVEs (including CVE-2026-76195 and CVE-2026-76197). No patch or official remediation has been documented in the provided data. The vulnerability has a CVSS v3.1 base score of 10.0, indicating critical impact on confidentiality, integrity, and availability.

Successful exploitation of this SSRF vulnerability can lead to arbitrary code execution with the privileges of the current user, potentially allowing full compromise of the affected system. The vulnerability does not require user interaction and has a changed scope, increasing the risk and impact severity. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Adobe's security advisories and apply any updates or mitigations as soon as they become available. Until a patch is released, consider restricting network access and applying compensating controls to limit exposure.