by Kastro
Paper/Archive/CVE-2026-81995

CVE-2026-81995

Adobe AEM 6.5 Forms JEE — Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)

EPSS 1%CVSS 9.1
critical.is priorityof 100
41
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 69.1.691 × 2013.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Affected

ProductAffectedFixed inSource
AEM 6.5 Forms JEE≤ 6.5.256.5.25 (AEMForms-6.5.0-0134 Hotfix)CNA
AEM 6.5 LTS Forms JEE≤ 6.5 LTS SP26.5 LTS SP3CNA

Scores by source

adobe (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryhelpx.adobe.com/security/products/aem-forms/apsb26-151.html