CVE-2026-48288

Analyzed Analyzed - Analysis Complete

Improper Input Validation in Adobe Experience Manager

Publication date: 2026-06-09

Last updated on: 2026-06-10

Assigner: Adobe Systems Incorporated

Description

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-09

Last Modified

2026-06-10

Generated

2026-06-30

AI Q&A

2026-06-09

EPSS Evaluated

2026-06-28

NVD

CVE-2026-48288

EUVD

EUVD-2026-35714

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	experience_manager	6.5
adobe	experience_manager	6.5
adobe	experience_manager	to 6.5.25.0 (exc)
adobe	experience_manager	to 2026.5.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability affects Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier. It is an Improper Input Validation issue that allows a low-privileged attacker to bypass security features. To exploit this vulnerability, the attacker needs the victim to interact with a maliciously crafted URL or a compromised web page.

Impact Analysis

The vulnerability could allow an attacker with low privileges to bypass security measures and gain unauthorized write access. This means the attacker could potentially modify data or content within the affected Adobe Experience Manager environment, which could lead to unauthorized changes or disruptions.

Compliance Impact

This vulnerability allows a low-privileged attacker to bypass security features and gain unauthorized write access by exploiting improper input validation in Adobe Experience Manager. Such unauthorized access could potentially lead to data integrity issues or unauthorized modifications.

However, the provided information does not specify any direct impact on compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2026-48288. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70