Skip to content
AdobeCVE-2026-75726

Adobe Experience Manager: improper input validation

Low3.5CVE-2026-75726 · Published Sep 8, 2026 · updated Sep 10, 2026

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Adobe advisory

Affected versions

PackageAffectedFixed in
Adobe Experience Manager 6.5
Product
<= 6.5.24No fix yet
Adobe Experience Manager 6.5 LTS
Product
<= SP2No fix yet
Adobe Experience Manager as a Cloud Service
Product
<= 2026.7.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20

More Adobe advisories

All Adobe
Advisory
Adobe Acrobat 2024: heap buffer overflow
Medium5.5Sep 8
Adobe Acrobat 2024: prototype pollution
High8.2Sep 8
Adobe Acrobat 2024: improper authorization
High8.8Sep 8
Adobe Acrobat 2024: improper authorization
Medium6.3Sep 8
Adobe Acrobat 2024: resource exhaustion
Medium5.5Sep 8
Adobe Acrobat 2024: use after free
High7.8Sep 8

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.