Advisories · Technology

Salesforce Marketing Cloud Engagement.

Every CVE that names Salesforce Marketing Cloud Engagement among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-2298 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Argument injection in Salesforce Marketing Cloud Engagement
- Salesforce Marketing Cloud Engagement
- Command injection
Not analysed yet 23 Mar 2026
CVE-2026-22583 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Argument injection in Salesforce Marketing Cloud Engagement
- Salesforce Marketing Cloud Engagement
- Command injection
Not analysed yet 24 Jan 2026
CVE-2026-22582 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Argument injection in Salesforce Marketing Cloud Engagement
- Salesforce Marketing Cloud Engagement
- Command injection
Not analysed yet 24 Jan 2026
CVE-2026-22586 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Hard-coded cryptographic key in Salesforce Marketing Cloud Engagement
- Salesforce Marketing Cloud Engagement
- Hard-coded credentials
Not analysed yet 24 Jan 2026
CVE-2026-22585 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Broken or risky cryptographic algorithm in Salesforce Marketing Cloud Engagement
- Salesforce Marketing Cloud Engagement
- Weak cryptography or TLS
Not analysed yet 24 Jan 2026