CVE-2026-75745
Awaiting Analysis Awaiting Analysis - Queue

Incorrect Authorization in Adobe Experience Manager Forms JEE

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: Adobe Systems Incorporated

Description
Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-75745
EUVD
EUVD-2026-84792

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
adobe experience_manager_forms_jee *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Adobe Experience Manager Forms JEE has an Incorrect Authorization vulnerability that allows attackers to execute arbitrary code in the context of the current user without requiring user interaction. This is a high-severity issue with a CVSS score of 10.0.

Impact Analysis

This vulnerability could allow attackers to run malicious code on your system, potentially leading to data theft, system compromise, or further network infiltration. Since no user interaction is needed, the risk is elevated.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA compliance requirements. Organizations may face legal penalties, data breach notifications, and reputational damage if exploited.

Mitigation Strategies

Apply the latest security patches or updates from Adobe for Experience Manager Forms JEE to address the Incorrect Authorization vulnerability. Ensure network segmentation and restrict access to vulnerable systems. Monitor for unusual activity or unauthorized code execution attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75745. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart