Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Salesforce Marketing Cloud Engagement January 21, 2026 Clear all filters
TI-2026-18144 CVE-2026-22583 · GHSA-gh85-7c93-rfh2

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…

Priority MEDIUM 50

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00647 Published 2026-01-24 Fixed in January 21, 2026 CWE-88
TI-2026-18143 CVE-2026-22582 · GHSA-vpvw-rgv5-vh74

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…

Priority MEDIUM 50

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00647 Published 2026-01-24 Fixed in January 21, 2026 CWE-88
TI-2026-18147 CVE-2026-22586 · GHSA-83vr-2q27-pm8v

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement…

Priority MEDIUM 50

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protoc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00602 Published 2026-01-24 Fixed in January 21, 2026 CWE-321
TI-2026-18146 CVE-2026-22585 · GHSA-h763-98v5-2w53

Broken or risky cryptographic algorithm in Salesforce Marketing Cloud Engagement

Priority MEDIUM 49

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00425 Published 2026-01-24 Fixed in January 21, 2026 CWE-327