CVE-2026-48259: Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could leverage this vulnerability to issue unauthorized server-side requests, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48259?
The severity of CVE-2026-48259 is critical with a CVSS score of 9.6.
How do I fix CVE-2026-48259?
To fix CVE-2026-48259, update Adobe Experience Manager to the latest version that addresses this SSRF vulnerability.
What type of vulnerability is CVE-2026-48259?
CVE-2026-48259 is a Server-Side Request Forgery (SSRF) vulnerability.
What are the potential impacts of CVE-2026-48259?
CVE-2026-48259 can lead to arbitrary code execution and unauthorized server-side requests by a low-privileged attacker.
Who is affected by CVE-2026-48259?
Any organization using a vulnerable version of Adobe Experience Manager is affected by CVE-2026-48259.