Read the docs

Salesforce

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Salesforce records in CISA KEV

No Salesforce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Marketing Cloud Engagement 4 records MEDIUM Mule 4 records MEDIUM Agentforce Vibes 3 records LOW Mulesoft Anypoint Code Builder 3 records LOW Tough-cookie 3 records HIGH Mobile Software Development Kit 1 record MEDIUM Uni2ts 1 record MEDIUM Workbench 1 record LOW

Records

4 records in Marketing Cloud Engagement · all components

TI-2026-18147 CVE-2026-22586 · GHSA-83vr-2q27-pm8v

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement…

Priority MEDIUM 50

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protoc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00602 Published 2026-01-24 Fixed in January 21, 2026 CWE-321
TI-2026-18144 CVE-2026-22583 · GHSA-gh85-7c93-rfh2

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…

Priority MEDIUM 50

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00647 Published 2026-01-24 Fixed in January 21, 2026 CWE-88
TI-2026-18143 CVE-2026-22582 · GHSA-vpvw-rgv5-vh74

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…

Priority MEDIUM 50

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00647 Published 2026-01-24 Fixed in January 21, 2026 CWE-88
TI-2026-18146 CVE-2026-22585 · GHSA-h763-98v5-2w53

Broken or risky cryptographic algorithm in Salesforce Marketing Cloud Engagement

Priority MEDIUM 49

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00425 Published 2026-01-24 Fixed in January 21, 2026 CWE-327
Open these records in search →