CRITICAL🇵🇱 Wersja polska

CVE-2026-48259

CVSS 9.6v3.1pub. 2026-07-14upd. 2026-08-28

Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could leverage this vulnerability to issue unauthorized server-side requests, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

  • Adobe Experience Manager

    APP
    Adobe
    6.5≤ 6.5.25.0≤ 2020.5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCESSRF
CWE
References

Related vulnerabilities

CVE-2026-48359CRITICAL9.6PL ✓same product

Adobe Experience Manager — XXE umożliwiające RCE i odczyt plików

CVE-2026-34691CRITICAL9.3PL ✓same product

Stored XSS w Adobe Experience Manager Forms JEE – krytyczna podatność

CVE-2025-64537CRITICAL9.3PL ✓same product

DOM-based XSS w Adobe Experience Manager umożliwiający RCE

CVE-2025-64538CRITICAL9.3PL ✓same product

DOM-based XSS w Adobe Experience Manager — możliwe RCE i przejęcie sesji

CVE-2025-64539CRITICAL9.3PL ✓same product

DOM-based XSS w Adobe Experience Manager umożliwiający RCE