CRITICAL 10.0 NVD
CVE-2026-48383
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current use
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
References
This critical severity vulnerability with a CVSS score of 10.0 was published on 2026-10-13 via NVD.
Risk Timeline
CVE Disclosed2026-10-13 · -1 days ago
Remediation Resources
Official Advisory
helpx.adobe.com/security/products/experience-manager/apsb26-152.html
vulnfeed aggregates 14602 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.