Vulnerability in Salesforce Marketing Cloud Engagement

CVE-2026-2298

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before Janu…

EPSS: 0.001 (21.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References