Description
Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | Adobe Experience Manager as a Cloud Service | ≤ 2026.5.0 | 2026.6.0 |
| Adobe | Adobe Experience Manager 6.5 LTS | ≤ SP2 | SP2 - Hotfix for NPR-43972 |
| Adobe | Adobe Experience Manager 6.5 | ≤ 6.5.25 | 6.5.25 - Hotfix for NPR-43971 |
Advisories 2
- NCSC-2026-0246 Kwetsbaarheden verholpen in Adobe Experience Manager NCSC-NL (Netherlands) · Jul 17, 2026
- WID-SEC-2026-2344 Adobe Experience Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 14, 2026