CVE-2026-48289
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier have an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker can bypass security measures and gain unauthorized write access. User interaction is required (visiting a maliciously crafted URL or interacting with a compromised web page).
Risk Assessment
An attacker can gain unauthorized write access to the system, potentially leading to content modification and further attacks.
Recommendation
Update Adobe Experience Manager to the latest version and educate users about safe browsing practices.
Original NVD description (English source)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.