by Kastro
Paper/Archive/CVE-2026-82000

CVE-2026-82000

Adobe AEM 6.5 Forms JEE — Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

EPSS 0.7%CVSS 9.6
critical.is priorityof 100
40
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 54.2.542 × 2010.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

Affected

ProductAffectedFixed inSource
AEM 6.5 Forms JEE≤ 6.5.256.5.25 (AEMForms-6.5.0-0134 Hotfix)CNA
AEM 6.5 LTS Forms JEE≤ 6.5 LTS SP26.5 LTS SP3CNA

Scores by source

adobe (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryhelpx.adobe.com/security/products/aem-forms/apsb26-151.html