Quick answers
- Is CVE-2026-48382 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-48382 being exploited in the wild.
- How severe is CVE-2026-48382?
- Critical severity, with a CVSS score of 10, published 13 October 2026.
- Which products and versions are affected?
- Adobe Experience Manager.
- Is there a fix for CVE-2026-48382?
- Yes: fixed in <UNKNOWN>. Until then: <UNKNOWN> Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-48382 attacked?
- It is attacked over the network, in a web application.
- Am I affected by CVE-2026-48382?
- Check whether you run Adobe Experience Manager. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
How to fix
- Fixed in: <UNKNOWN>
<UNKNOWN>
Technical details
An incorrect authorization vulnerability in Adobe Experience Manager fails to properly validate access controls, allowing attackers to execute arbitrary code in the context of the current user. The vulnerability requires network access but does not require user interaction for exploitation. The flaw impacts the scope of the affected system, potentially enabling privilege escalation and unauthorized control over victim accounts or sessions.
Affected products
- Adobe Experience Manager
Timeline
- 2026-10-13: disclosed