5.4Medium

CVE-2026-118482Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Adobe Experience Manager 6.5 Published: (3 days ago)

Description

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited read and write access. Exploitation of this issue does not require user interaction.

Weakness (CWE): CWE-20

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Adobe Adobe Experience Manager 6.5 ≤ 6.5.25, fixed 6.5.25 - Cumulative Hotfix for GRANITE-75398

References and patches