CVE-2026-48289

Description

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Traduire en français

Produits concernés

• Adobe Experience Manager as a Cloud Service
• Adobe Experience Manager 6.5 LTS
• Adobe Experience Manager 6.5
• Adobe experience manager

Scores CVSS

Faiblesses (CWE)

• CWE-20

Références

• https://helpx.adobe.com/security/products/experience-manager/apsb26-56.html Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories