Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2026-48288

Adobe Experience Manager | Improper Input Validation (CWE-20)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Experience Manager as a Cloud Service

Default version status: unaffected

  • 0 to ≤ 2026.4.0affected
  • 2026.5.0unaffected

Adobe Adobe Experience Manager 6.5 LTS

Default version status: unaffected

  • 0 to ≤ SP1affected
  • SP2unaffected

Adobe Adobe Experience Manager 6.5

Default version status: unaffected

  • 0 to ≤ 6.5.24affected
  • 6.5.25unaffected

References