CVE-2026-106626

Received Received - Intake

Improper Input Validation in Adobe Experience Manager Leads to Arbitrary Code Execution

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Adobe Systems Incorporated

Description

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-13

Generated

2026-10-14

AI Q&A

2026-10-14

EPSS Evaluated

N/A

NVD

CVE-2026-106626

EUVD

EUVD-2026-100530

Affected Vendors & Products

Vendor	Product	Version / Range
Adobe	Adobe	Experience Manager as a Cloud Service 0
Adobe	Adobe	Experience Manager 6.5 LTS 0
Adobe	Adobe	Experience Manager 6.5 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

Adobe Experience Manager has an Improper Input Validation vulnerability that allows arbitrary code execution with the privileges of the current user. An attacker with high privileges could exploit this to run malicious code without requiring any user interaction. The scope of this vulnerability has been modified.

Impact Analysis

If you use Adobe Experience Manager, an attacker with high privileges could execute arbitrary code on your system, potentially leading to data breaches, system compromise, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially causing data breaches that violate GDPR or HIPAA compliance. Organizations using affected versions may face regulatory penalties or legal consequences if exploited.

Mitigation Strategies

Apply the latest security patches or updates provided by Adobe for Adobe Experience Manager. Restrict user privileges to minimize the risk of exploitation. Monitor system logs for unusual activity or unauthorized code execution attempts.

Hi! I’m here to help you understand CVE-2026-106626. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70