CVE-2026-75732: Adobe Experience Manager | Incorrect Authorization (CWE-863)
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need before attempting exploitation?
The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction.
Is this exposed over the network?
Yes. The supplied CVSS vector identifies the attack vector as network-based and the attack complexity as low.
What is the potential effect after successful exploitation?
Successful exploitation could allow arbitrary code execution in the context of the current user. It may result in elevated access or control over the victim's account or session, with high confidentiality, integrity, and availability impact indicated by the supplied vector.