Improper Input Validation in Adobe Experience Manager
CVE-2026-118482

5.4MEDIUM

Key Information:

Vendor

Adobe
Status
Adobe Experience Manager 6.5
Vendor
CVE Published:
10 November 2026

What is CVE-2026-118482?

Adobe Experience Manager is susceptible to a vulnerability that allows low-privileged attackers to perform a security feature bypass due to improper input validation. This issue permits unauthorized limited read and write access without requiring any user interaction, potentially compromising sensitive data and undermining the integrity of the application.

Affected Version(s)

Adobe Experience Manager 6.5 0 <= 6.5.25

Adobe Experience Manager 6.5 6.5.25 - Cumulative Hotfix for GRANITE-75398

References

https://www.adobe.com/trust/security/products/experience-...
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.