Low severity3.5NVD Advisory· Published Sep 8, 2026· Updated Sep 10, 2026
CVE-2026-75726
CVE-2026-75726
Description
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Affected products
6cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:*+ 5 more
- cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:*range: <6.5.25.0
- cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:*range: <2026.8.0
- cpe:2.3:a:adobe:experience_manager:6.5:-:*:*:lts:*:*:*
- cpe:2.3:a:adobe:experience_manager:6.5:sp1:*:*:lts:*:*:*
- cpe:2.3:a:adobe:experience_manager:6.5:sp2:*:*:lts:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/experience-manager/apsb26-98.htmlnvdVendor Advisory
News mentions
1- Adobe Experience Manager: 25 XSS and Input Validation Flaws Disclosed TogetherVypr Intelligence · Sep 8, 2026