CVE-2026-105895

Received Received - Intake

Improper Input Validation in Adobe Experience Manager

Publication date: 2026-10-13

Last updated on: 2026-10-14

Assigner: Adobe Systems Incorporated

Description

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-105895

EUVD

EUVD-2026-100529

Affected Vendors & Products

Vendor	Product	Version / Range
Adobe	Adobe	Experience Manager 6.5 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

Adobe Experience Manager has an Improper Input Validation vulnerability that allows arbitrary code execution. This means attackers can run malicious code in the context of a user's session without needing the user to interact with anything. It could let them gain higher access or control over the victim's account.

Impact Analysis

This vulnerability could allow attackers to execute arbitrary code on your system, potentially taking over your account or session. Since exploitation doesn't require user interaction, you could be affected even if you don't click anything. It may lead to unauthorized access, data theft, or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate GDPR (data protection) or HIPAA (health information privacy). Compliance requires protecting user data, and such vulnerabilities increase the risk of non-compliance, potential fines, and legal consequences.

Mitigation Strategies

Apply the latest security patches or updates provided by Adobe for Adobe Experience Manager. Monitor Adobe's security advisories for patches and updates. Restrict access to the system to trusted users only. Implement network segmentation to limit exposure.

Hi! I’m here to help you understand CVE-2026-105895. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70