CVE-2026-48288

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier

Description An improper input validation issue exists where insufficient verification of user-supplied data allows a low-privileged remote attacker to bypass security mechanisms. This can result in unauthorized write access. Successful exploitation requires user interaction, such as visiting a maliciously crafted URL or interacting with a compromised web page.

Recommendations Update to a version later than 6.5.24, LTS SP1, or 2026.04.