PT-2026-27201 · Salesforce · Marketing Cloud Engagement

Published

2026-03-23

·

Updated

2026-03-23

·

CVE-2026-2298

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026.

Argument Injection

Weakness Enumeration

Related Identifiers

CVE-2026-2298

Affected Products

Marketing Cloud Engagement