# CVE-2026-75745: Adobe Experience Manager Forms JEE authorization bypass

Source: https://junglewise.ai/threats/cve-2026-75745-adobe-experience-manager-forms-jee-is-affected-by-an-incorrect  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-22. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-75745 · Severity: critical · CVSS 10 · Published 2026-09-22

Adobe Experience Manager Forms JEE is a document and form management system used by enterprises to create and process business-critical forms. An authorization vulnerability in this product allows attackers to execute arbitrary code without user interaction, potentially compromising the entire Forms JEE instance and any data it processes.

Technologies: [Adobe Experience Manager Forms JEE](https://junglewise.ai/threats/technologies/experience-manager-forms-jee). Vendors: [Adobe](https://junglewise.ai/threats/vendors/adobe).

## Quick answers

**Is CVE-2026-75745 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-75745 being exploited in the wild.

**How severe is CVE-2026-75745?** Critical severity, with a CVSS score of 10, published 22 September 2026.

**Which products and versions are affected?** Adobe Experience Manager Forms JEE.

**Is there a fix for CVE-2026-75745?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-75745 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-75745?** Check whether you run Adobe Experience Manager Forms JEE. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An incorrect authorization flaw in Adobe Experience Manager Forms JEE permits unauthenticated or low-privileged attackers to bypass access controls and achieve arbitrary code execution in the context of the application. The vulnerability requires network access but no user interaction; scope changes indicate a jump from the vulnerable component to other system components. A patch is expected from Adobe given the reported severity.

## Affected products

- Adobe Experience Manager Forms JEE

## Timeline

- 2026-09-22: disclosed

## References

- [https://helpx.adobe.com/security/products/aem-forms/apsb26-151.html](https://helpx.adobe.com/security/products/aem-forms/apsb26-151.html)

## Related threats

- [Adobe Experience Manager Forms JEE server-side request forgery](https://junglewise.ai/threats/cve-2026-82000-adobe-experience-manager-forms-jee-is-affected-by-a-server-side)
- [Adobe Experience Manager Forms JEE server-side request forgery](https://junglewise.ai/threats/cve-2026-81999-adobe-experience-manager-forms-jee-is-affected-by-a-server-side)
- [Adobe Experience Manager Forms JEE arbitrary code execution](https://junglewise.ai/threats/cve-2026-81995-adobe-experience-manager-forms-jee-is-affected-by-an-improper)
- [Adobe Experience Manager Forms JEE stored XSS in form fields](https://junglewise.ai/threats/cve-2026-75744-adobe-experience-manager-forms-jee-is-affected-by-a-stored-cross)
- [Adobe Experience Manager Forms JEE cross-site request forgery](https://junglewise.ai/threats/cve-2026-75743-adobe-experience-manager-forms-jee-is-affected-by-a-cross-site)