AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

AdobeCVE-2026-106634

Adobe Experience Manager 6.5: path traversal

Adobe

CVE-2026-106634 · Published Oct 13, 2026 · updated Oct 30, 2026

High7.7
No fix yet
Adobe advisory

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file system. Exploitation of this issue does not require user interaction. Scope is changed.

Affected versions

PackageAffectedFixed in
Adobe Experience Manager 6.5
Product
<= 6.5.25No fix yet
Adobe Experience Manager 6.5 LTS
Product
<= 6.5 LTS SP3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-22

More Adobe advisories

All Adobe