CVE-2026-48359

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager (affected versions not specified) Adobe Media Encoder (affected versions not specified)

Description Adobe Experience Manager and Adobe Media Encoder are affected by an Improper Restriction of XML External Entity Reference (XXE) issue. XXE is a type of vulnerability that occurs when an XML parser improperly processes external entity references within an XML document. In Adobe Experience Manager, this could allow a low-privileged attacker to read sensitive files and potentially execute arbitrary code in the context of the current user, leading to elevated access or control over accounts and sessions without requiring user interaction. In Adobe Media Encoder, this flaw allows a remote attacker to perform XXE attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.