CVE-2026-106626: Adobe Experience Manager | Improper Input Validation (CWE-20)
Published Oct 13, 2026
·Updated
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
1 affected component
Adobe Experience Manager
Event History
Oct 13, 2026
CVE Published
via MITRE·07:38 PM
Data Sourced
via MITRE·07:38 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Can this be exploited without user interaction?
Yes. Exploitation does not require user interaction.
2
What level of access does an attacker need before exploiting this issue?
The attacker must already have high privileges. The vulnerability is network-accessible and has low attack complexity.
3
What could happen if exploitation succeeds?
An attacker could execute arbitrary code in the context of the current user. The reported impact includes high confidentiality, integrity, and availability impact, with scope changed.