Vulnerability in Salesforce Marketing Cloud Engagement

CVE-2026-22583

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud…

EPSS: 0.000 (8.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References