CVE-2026-110083: Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Published Oct 13, 2026
·Updated
Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
Adobe Experience Manager
Event History
Oct 13, 2026
CVE Published
via MITRE·07:38 PM
Data Sourced
via MITRE·07:38 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require a victim to take any action?
No. Exploitation does not require user interaction.
2
What level of access does an attacker need before attempting exploitation?
The issue is described as exploitable by a low-privileged attacker. The available information does not establish whether unauthenticated exploitation is possible.