CVE-2026-48252
published 2026-07-14CVE-2026-48252: Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An…
PriorityP358high8.6CVSS 3.1
AVNACLPRNUINSCCNIHAN
EPSS
0.40%
32.9th percentile
Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | adobe_experience_manager_6.5 | <= 6.5.25 | — |
| adobe | adobe_experience_manager_6.5_lts | <= SP2 | — |
| adobe | adobe_experience_manager_as_a_cloud_service | <= 2026.5.0 | — |
| adobe | experience_manager | <= 6.5.25.0 | — |
| adobe | experience_manager | <= 2020.5.0 | — |
| adobe | experience_manager | — | — |
| adobe | experience_manager | — | — |
| adobe | experience_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Adobe Experience Manager Critical Function missing authentication (Nessus ID 327021)
vuldb·2026-07-19·CVSS 8.6
CVE-2026-48252 [HIGH] Adobe Experience Manager Critical Function missing authentication (Nessus ID 327021)
A vulnerability identified as critical has been detected in Adobe Experience Manager. This vulnerability affects unknown code of the component Critical Function. Performing a manipulation results in missing authentication.
This vulnerability is known as CVE-2026-48252. Remote exploitation of the attack is possible. No exploit is available.
GHSA
Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass.
ghsa_unreviewed·2026-07-14
CVE-2026-48252 [HIGH] CWE-306 Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass.
Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-14
Published