CVE-2026-75745: Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)
Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
Can this be exploited remotely without credentials or user interaction?
Yes. The vector is network-based, requires low attack complexity, no privileges, and no user interaction.
What impact could successful exploitation have?
An attacker could execute arbitrary code in the context of the current user. The reported impact includes high confidentiality, integrity, and availability impact, with changed scope.
Which deployments should be prioritized for investigation?
Adobe Experience Manager Forms JEE deployments reachable over the network should be prioritized, because the vulnerability is remotely exploitable and does not require privileges or user interaction.