{"schema_version":1,"title":"Adobe Experience Manager vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 58 vulnerabilities in Adobe Experience Manager: 22 in the last 7 days and 22 in the last 90 days, 7 of them critical and 0 exploited in the wild. The most recent, CVE-2026-90532, was published on 13 October 2026. 22 vulnerabilities in the last four weeks, up from none in the four before. 7 critical against 0.","url":"https://junglewise.ai/threats/technologies/adobe-experience-manager","json_url":"https://junglewise.ai/threats/technologies/adobe-experience-manager.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/adobe-experience-manager","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":3,"all_time":58,"critical":7,"exploited":0,"last_7_days":22,"last_30_days":22,"last_90_days":22,"last_365_days":55},"latest":[{"cve":"CVE-2026-90532","cvss":10,"epss":0.0066,"slug":"cve-2026-90532-adobe-experience-manager-is-affected-by-an-incorrect","title":"Adobe Experience Manager incorrect authorization leading to code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T20:19:10.15+00:00","url":"https://junglewise.ai/threats/cve-2026-90532-adobe-experience-manager-is-affected-by-an-incorrect"},{"cve":"CVE-2026-90531","cvss":9.6,"epss":0.0048,"slug":"cve-2026-90531-adobe-experience-manager-is-affected-by-an-improper-restriction","title":"Adobe Experience Manager XXE privilege escalation","severity":"critical","exploited":false,"published_at":"2026-10-13T20:19:10.03+00:00","url":"https://junglewise.ai/threats/cve-2026-90531-adobe-experience-manager-is-affected-by-an-improper-restriction"},{"cve":"CVE-2026-83960","cvss":5.4,"epss":0.0034,"slug":"cve-2026-83960-adobe-experience-manager-is-affected-by-a-dom-based-cross-site","title":"Adobe Experience Manager DOM-based XSS vulnerability","severity":"medium","exploited":false,"published_at":"2026-10-13T20:18:35.21+00:00","url":"https://junglewise.ai/threats/cve-2026-83960-adobe-experience-manager-is-affected-by-a-dom-based-cross-site"},{"cve":"CVE-2026-83958","cvss":5.4,"epss":0.0034,"slug":"cve-2026-83958-adobe-experience-manager-is-affected-by-a-dom-based-cross-site","title":"Adobe Experience Manager DOM-based cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-10-13T20:18:35.083+00:00","url":"https://junglewise.ai/threats/cve-2026-83958-adobe-experience-manager-is-affected-by-a-dom-based-cross-site"},{"cve":"CVE-2026-83662","cvss":9.3,"epss":0.0072,"slug":"cve-2026-83662-adobe-experience-manager-is-affected-by-a-reflected-cross-site","title":"Adobe Experience Manager reflected XSS vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-13T20:18:11.5+00:00","url":"https://junglewise.ai/threats/cve-2026-83662-adobe-experience-manager-is-affected-by-a-reflected-cross-site"},{"cve":"CVE-2026-75732","cvss":9.9,"epss":0.0057,"slug":"cve-2026-75732-adobe-experience-manager-is-affected-by-an-incorrect","title":"Adobe Experience Manager incorrect authorization","severity":"critical","exploited":false,"published_at":"2026-10-13T20:18:04.2+00:00","url":"https://junglewise.ai/threats/cve-2026-75732-adobe-experience-manager-is-affected-by-an-incorrect"},{"cve":"CVE-2026-48398","cvss":5.4,"epss":0.0042,"slug":"cve-2026-48398-adobe-experience-manager-is-affected-by-a-dom-based-cross-site","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:29.137+00:00","url":"https://junglewise.ai/threats/cve-2026-48398-adobe-experience-manager-is-affected-by-a-dom-based-cross-site"},{"cve":"CVE-2026-48383","cvss":10,"epss":0.0082,"slug":"cve-2026-48383-adobe-experience-manager-is-affected-by-an-incorrect","title":"Adobe Experience Manager authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T20:17:29.017+00:00","url":"https://junglewise.ai/threats/cve-2026-48383-adobe-experience-manager-is-affected-by-an-incorrect"},{"cve":"CVE-2026-48382","cvss":10,"epss":0.0082,"slug":"cve-2026-48382-adobe-experience-manager-is-affected-by-an-incorrect","title":"Adobe Experience Manager authorization bypass with code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T20:17:28.9+00:00","url":"https://junglewise.ai/threats/cve-2026-48382-adobe-experience-manager-is-affected-by-an-incorrect"},{"cve":"CVE-2026-110084","cvss":7.1,"epss":0.0044,"slug":"cve-2026-110084-adobe-experience-manager-is-affected-by-an-xml-injection-aka","title":"Adobe Experience Manager XML injection in XPath processing","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:27.217+00:00","url":"https://junglewise.ai/threats/cve-2026-110084-adobe-experience-manager-is-affected-by-an-xml-injection-aka"},{"cve":"CVE-2026-110083","cvss":7.1,"epss":0.0035,"slug":"cve-2026-110083-adobe-experience-manager-is-affected-by-an-improper","title":"Adobe Experience Manager SQL injection","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:27.09+00:00","url":"https://junglewise.ai/threats/cve-2026-110083-adobe-experience-manager-is-affected-by-an-improper"},{"cve":"CVE-2026-110082","cvss":5.4,"epss":0.0036,"slug":"cve-2026-110082-adobe-experience-manager-is-affected-by-a-reflected-cross-site","title":"Adobe Experience Manager reflected cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:26.97+00:00","url":"https://junglewise.ai/threats/cve-2026-110082-adobe-experience-manager-is-affected-by-a-reflected-cross-site"},{"cve":"CVE-2026-110081","cvss":5.4,"epss":0.0036,"slug":"cve-2026-110081-adobe-experience-manager-is-affected-by-a-stored-cross-site","title":"Adobe Experience Manager stored cross-site scripting in form fields","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:26.86+00:00","url":"https://junglewise.ai/threats/cve-2026-110081-adobe-experience-manager-is-affected-by-a-stored-cross-site"},{"cve":"CVE-2026-110080","cvss":5.4,"epss":0.0033,"slug":"cve-2026-110080-adobe-experience-manager-is-affected-by-a-dom-based-cross-site","title":"Adobe Experience Manager DOM-based Cross-Site Scripting","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:26.74+00:00","url":"https://junglewise.ai/threats/cve-2026-110080-adobe-experience-manager-is-affected-by-a-dom-based-cross-site"},{"cve":"CVE-2026-110079","cvss":5.4,"epss":0.0033,"slug":"cve-2026-110079-adobe-experience-manager-is-affected-by-a-dom-based-cross-site","title":"Adobe Experience Manager DOM-based cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:26.623+00:00","url":"https://junglewise.ai/threats/cve-2026-110079-adobe-experience-manager-is-affected-by-a-dom-based-cross-site"},{"cve":"CVE-2026-110078","cvss":5.4,"epss":0.0033,"slug":"cve-2026-110078-adobe-experience-manager-is-affected-by-a-dom-based-cross-site","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:26.503+00:00","url":"https://junglewise.ai/threats/cve-2026-110078-adobe-experience-manager-is-affected-by-a-dom-based-cross-site"},{"cve":"CVE-2026-110077","cvss":5.4,"epss":0.0033,"slug":"cve-2026-110077-adobe-experience-manager-is-affected-by-a-dom-based-cross-site","title":"Adobe Experience Manager DOM-based cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:26.38+00:00","url":"https://junglewise.ai/threats/cve-2026-110077-adobe-experience-manager-is-affected-by-a-dom-based-cross-site"},{"cve":"CVE-2026-110076","cvss":5.4,"epss":0.0033,"slug":"cve-2026-110076-adobe-experience-manager-is-affected-by-a-dom-based-cross-site","title":"Adobe Experience Manager DOM-based cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:26.253+00:00","url":"https://junglewise.ai/threats/cve-2026-110076-adobe-experience-manager-is-affected-by-a-dom-based-cross-site"},{"cve":"CVE-2026-110075","cvss":5.4,"epss":0.0033,"slug":"cve-2026-110075-adobe-experience-manager-is-affected-by-a-dom-based-cross-site","title":"Adobe Experience Manager DOM-based cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:26.117+00:00","url":"https://junglewise.ai/threats/cve-2026-110075-adobe-experience-manager-is-affected-by-a-dom-based-cross-site"},{"cve":"CVE-2026-110073","cvss":5.4,"epss":0.0036,"slug":"cve-2026-110073-adobe-experience-manager-is-affected-by-a-stored-cross-site","title":"Adobe Experience Manager stored cross-site scripting in form fields","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:25.89+00:00","url":"https://junglewise.ai/threats/cve-2026-110073-adobe-experience-manager-is-affected-by-a-stored-cross-site"},{"cve":"CVE-2026-106634","cvss":7.7,"epss":0.0046,"slug":"cve-2026-106634-adobe-experience-manager-is-affected-by-an-improper-limitation","title":"Adobe Experience Manager path traversal in file write","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:17.103+00:00","url":"https://junglewise.ai/threats/cve-2026-106634-adobe-experience-manager-is-affected-by-an-improper-limitation"},{"cve":"CVE-2026-106629","cvss":9.3,"epss":0.0068,"slug":"cve-2026-106629-adobe-experience-manager-is-affected-by-a-stored-cross-site","title":"Adobe Experience Manager stored cross-site scripting in form fields","severity":"critical","exploited":false,"published_at":"2026-10-13T20:17:16.507+00:00","url":"https://junglewise.ai/threats/cve-2026-106629-adobe-experience-manager-is-affected-by-a-stored-cross-site"},{"cve":"CVE-2025-64623","cvss":5.4,"epss":0.0025,"slug":"cve-2025-64623-adobe-experience-manager-versions-6-5-23-and-earlier-are-affected","title":"Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…","severity":"medium","exploited":false,"published_at":"2025-12-10T19:16:27.09+00:00","url":"https://junglewise.ai/threats/cve-2025-64623-adobe-experience-manager-versions-6-5-23-and-earlier-are-affected"},{"cve":"CVE-2025-64622","cvss":5.4,"epss":0.002,"slug":"cve-2025-64622-adobe-experience-manager-versions-6-5-23-and-earlier-are-affected","title":"Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…","severity":"medium","exploited":false,"published_at":"2025-12-10T19:16:26.93+00:00","url":"https://junglewise.ai/threats/cve-2025-64622-adobe-experience-manager-versions-6-5-23-and-earlier-are-affected"},{"cve":"CVE-2025-64620","cvss":5.4,"epss":0.0025,"slug":"cve-2025-64620-adobe-experience-manager-versions-6-5-23-and-earlier-are-affected","title":"Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…","severity":"medium","exploited":false,"published_at":"2025-12-10T19:16:26.77+00:00","url":"https://junglewise.ai/threats/cve-2025-64620-adobe-experience-manager-versions-6-5-23-and-earlier-are-affected"}],"weekly":[{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":7,"exploited":0,"vulnerabilities":22},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Adobe ColdFusion","slug":"coldfusion","vulnerabilities":95,"url":"https://junglewise.ai/threats/technologies/coldfusion"},{"name":"Adobe Commerce","slug":"commerce","vulnerabilities":64,"url":"https://junglewise.ai/threats/technologies/commerce"},{"name":"Adobe Acrobat","slug":"acrobat","vulnerabilities":63,"url":"https://junglewise.ai/threats/technologies/acrobat"},{"name":"Adobe Acrobat Reader","slug":"acrobat-reader","vulnerabilities":60,"url":"https://junglewise.ai/threats/technologies/acrobat-reader"},{"name":"Adobe Flash Player","slug":"flash-player","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/flash-player"},{"name":"Adobe AIR","slug":"air","vulnerabilities":55,"url":"https://junglewise.ai/threats/technologies/air"},{"name":"Adobe C2pa","slug":"c2pa","vulnerabilities":52,"url":"https://junglewise.ai/threats/technologies/c2pa"},{"name":"Adobe C2pa-Web","slug":"c2pa-web","vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/c2pa-web"},{"name":"Adobe Content Credentials JS SDK","slug":"content-credentials-js-sdk","vulnerabilities":42,"url":"https://junglewise.ai/threats/technologies/content-credentials-js-sdk"},{"name":"Adobe Acrobat DC","slug":"acrobat-dc","vulnerabilities":39,"url":"https://junglewise.ai/threats/technologies/acrobat-dc"},{"name":"Adobe C2patool","slug":"c2patool","vulnerabilities":38,"url":"https://junglewise.ai/threats/technologies/c2patool"},{"name":"Adobe Acrobat Reader DC","slug":"acrobat-reader-dc","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/acrobat-reader-dc"}],"technology":{"hub":true,"name":"Adobe Experience Manager","slug":"adobe-experience-manager","vendor":{"hub":true,"name":"Adobe","slug":"adobe","url":"https://junglewise.ai/threats/vendors/adobe"},"aliases":[],"category":"cms","description":"Web content management and digital asset management platform for creating and delivering digital experiences.","url":"https://junglewise.ai/threats/technologies/adobe-experience-manager"},"most_severe":[{"cve":"CVE-2026-48383","cvss":10,"epss":0.0082,"slug":"cve-2026-48383-adobe-experience-manager-is-affected-by-an-incorrect","title":"Adobe Experience Manager authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T20:17:29.017+00:00","url":"https://junglewise.ai/threats/cve-2026-48383-adobe-experience-manager-is-affected-by-an-incorrect"},{"cve":"CVE-2026-48382","cvss":10,"epss":0.0082,"slug":"cve-2026-48382-adobe-experience-manager-is-affected-by-an-incorrect","title":"Adobe Experience Manager authorization bypass with code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T20:17:28.9+00:00","url":"https://junglewise.ai/threats/cve-2026-48382-adobe-experience-manager-is-affected-by-an-incorrect"},{"cve":"CVE-2026-90532","cvss":10,"epss":0.0066,"slug":"cve-2026-90532-adobe-experience-manager-is-affected-by-an-incorrect","title":"Adobe Experience Manager incorrect authorization leading to code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T20:19:10.15+00:00","url":"https://junglewise.ai/threats/cve-2026-90532-adobe-experience-manager-is-affected-by-an-incorrect"},{"cve":"CVE-2026-75732","cvss":9.9,"epss":0.0057,"slug":"cve-2026-75732-adobe-experience-manager-is-affected-by-an-incorrect","title":"Adobe Experience Manager incorrect authorization","severity":"critical","exploited":false,"published_at":"2026-10-13T20:18:04.2+00:00","url":"https://junglewise.ai/threats/cve-2026-75732-adobe-experience-manager-is-affected-by-an-incorrect"},{"cve":"CVE-2026-90531","cvss":9.6,"epss":0.0048,"slug":"cve-2026-90531-adobe-experience-manager-is-affected-by-an-improper-restriction","title":"Adobe Experience Manager XXE privilege escalation","severity":"critical","exploited":false,"published_at":"2026-10-13T20:19:10.03+00:00","url":"https://junglewise.ai/threats/cve-2026-90531-adobe-experience-manager-is-affected-by-an-improper-restriction"},{"cve":"CVE-2026-83662","cvss":9.3,"epss":0.0072,"slug":"cve-2026-83662-adobe-experience-manager-is-affected-by-a-reflected-cross-site","title":"Adobe Experience Manager reflected XSS vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-13T20:18:11.5+00:00","url":"https://junglewise.ai/threats/cve-2026-83662-adobe-experience-manager-is-affected-by-a-reflected-cross-site"},{"cve":"CVE-2026-106629","cvss":9.3,"epss":0.0068,"slug":"cve-2026-106629-adobe-experience-manager-is-affected-by-a-stored-cross-site","title":"Adobe Experience Manager stored cross-site scripting in form fields","severity":"critical","exploited":false,"published_at":"2026-10-13T20:17:16.507+00:00","url":"https://junglewise.ai/threats/cve-2026-106629-adobe-experience-manager-is-affected-by-a-stored-cross-site"},{"cve":"CVE-2026-106634","cvss":7.7,"epss":0.0046,"slug":"cve-2026-106634-adobe-experience-manager-is-affected-by-an-improper-limitation","title":"Adobe Experience Manager path traversal in file write","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:17.103+00:00","url":"https://junglewise.ai/threats/cve-2026-106634-adobe-experience-manager-is-affected-by-an-improper-limitation"},{"cve":"CVE-2026-110084","cvss":7.1,"epss":0.0044,"slug":"cve-2026-110084-adobe-experience-manager-is-affected-by-an-xml-injection-aka","title":"Adobe Experience Manager XML injection in XPath processing","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:27.217+00:00","url":"https://junglewise.ai/threats/cve-2026-110084-adobe-experience-manager-is-affected-by-an-xml-injection-aka"},{"cve":"CVE-2026-110083","cvss":7.1,"epss":0.0035,"slug":"cve-2026-110083-adobe-experience-manager-is-affected-by-an-improper","title":"Adobe Experience Manager SQL injection","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:27.09+00:00","url":"https://junglewise.ai/threats/cve-2026-110083-adobe-experience-manager-is-affected-by-an-improper"}],"generated_at":"2026-10-19T03:07:00.200186+00:00"}