CVE-2026-48288
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier have an Improper Input Validation vulnerability leading to security feature bypass and unauthorized write access.
Risk Assessment
A low-privileged attacker can bypass security measures and gain unauthorized write access, requiring user interaction.
Recommendation
Update Adobe Experience Manager to the latest available version.
Original NVD description (English source)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.