Salesforce Marketing Cloud Engagement — known CVE vulnerabilities

Every CVE whose affected-product data names Salesforce Marketing Cloud Engagement, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-22582 — CVSS 9.8 (critical): Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement…
• CVE-2026-22583 — CVSS 9.8 (critical): Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement…
• CVE-2026-22585 — CVSS 9.8 (critical): Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend…
• CVE-2026-22586 — CVSS 9.8 (critical): Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center…