CVE-2026-81995: Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)
Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to exploitation?
Adobe Experience Manager Forms JEE deployments are exposed if an attacker already has high privileges in the affected environment. The vulnerability can be exploited over the network and does not require user interaction.
What level of access does an attacker need?
The attacker must have high privileges before exploiting the issue. The provided information does not identify which specific roles or permissions satisfy that requirement.
What could successful exploitation allow?
Successful exploitation could allow arbitrary code execution in the context of the current user. The impact includes high confidentiality, integrity, and availability effects, and the vulnerability has changed scope.