Missing Authentication Vulnerability in Adobe Experience Manager
CVE-2026-48252

8.6HIGH

What is CVE-2026-48252?

Adobe Experience Manager has a vulnerability that allows attackers to bypass security measures due to missing authentication for critical functions. This issue enables unauthorized write access without requiring user interaction, leading to potential risks for organizations using the affected product. It's crucial for users to assess their implementations and apply necessary security measures to mitigate the threat.

Affected Version(s)

Adobe Experience Manager 6.5 0 <= 6.5.25

Adobe Experience Manager 6.5 0 <= 6.5.25

Adobe Experience Manager 6.5 LTS 0

References

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.