Improper XML Handling in Adobe Experience Manager

CVE-2026-48359

What is CVE-2026-48359?

Adobe Experience Manager is vulnerable to an Improper Restriction of XML External Entity Reference (XXE) issue, which may allow a low-privileged attacker to exploit this flaw. By manipulating XML input, attackers can potentially access sensitive files, thus gaining elevated privileges or controlling the victim's session. This vulnerability can be exploited without any user interaction, increasing the risk of malicious activities and unauthorized access.

References