Low severity3.5NVD Advisory· Published Jun 9, 2026· Updated Jun 10, 2026
CVE-2026-48288
CVE-2026-48288
Description
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Affected products
5cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:*+ 4 more
- cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:*range: <6.5.25.0
- cpe:2.3:a:adobe:experience_manager:6.5:-:*:*:lts:*:*:*
- cpe:2.3:a:adobe:experience_manager:6.5:sp1:*:*:lts:*:*:*
- cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:*range: <2026.5.0
- (no CPE)range: <=6.5.24, LTS SP1, 2026.04
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/experience-manager/apsb26-56.htmlnvdVendor Advisory
News mentions
2- Adobe Experience Manager: 25 Vulnerabilities Disclosed, Mostly XSS and Memory CorruptionVypr Intelligence · Jun 9, 2026
- Adobe Experience Manager: 25 Vulnerabilities Disclosed, Mostly Stored and DOM XSSVypr Intelligence · Jun 9, 2026