AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-19232

Adobe Experience Manager: improper authorization

Adobe

CVE-2026-19232 · Published Sep 8, 2026 · updated Sep 11, 2026

Critical9.9
No fix yet
Adobe advisory

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

Affected versions

PackageAffectedFixed in
Adobe Experience Manager 6.5
Product
<= 6.5.24No fix yet
Adobe Experience Manager 6.5 LTS
Product
<= SP2No fix yet
Adobe Experience Manager as a Cloud Service
Product
<= 2026.7.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-863

More Adobe advisories

All Adobe