CVE-2026-48252

Summary

Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.

Affected Software

VendorProductVersion RangeStatus
AdobeAdobe Experience Manager as a Cloud Service0 <= 2026.5.0affected
AdobeAdobe Experience Manager as a Cloud Service2026.6.0unaffected
AdobeAdobe Experience Manager 6.5 LTS0 <= SP1affected
AdobeAdobe Experience Manager 6.5 LTSSP2 - Hotfix for NPR-43972unaffected
AdobeAdobe Experience Manager 6.50 <= 6.5.24affected
AdobeAdobe Experience Manager 6.56.5.25 - Hotfix for NPR-43972unaffected

Weaknesses

  • CWE-306: Missing Authentication for Critical Function (CWE-306)

References