CVE-2026-22586
CRITICALSalesforce Marketing Cloud Engagement - Web Services Protocol Manip...
Title source: llmDescription
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.
Scores
CVSS v3
9.8
EPSS
0.0002
EPSS Percentile
5.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-321
Status
published
Affected Products (1)
salesforce/marketing_cloud_engagement
< 2026-01-21
Timeline
Published
Jan 24, 2026
Tracked Since
Feb 18, 2026