CVE-2026-48288 LOW

CVE-2026-48288: Adobe Experience Manager | Improper Input Validation (CWE-20)

Vendor Adobe
Product Adobe Experience Manager
Weakness CWE-20 · Input validation
Published June 9, 2026
Last update June 10, 2026

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Key dates

02Disclosure timeline

June 9, 2026 CVE published
June 10, 2026 Record updated