CVE-2026-106626Published
Adobe Experience Manager | Improper Input Validation (CWE-20)
cve-program · CVE-2026-106626
PublishedAdobe Experience Manager as a Cloud Service
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Adobe",
"product": "Adobe Experience Manager as a Cloud Service",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "2026.9.28187",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2026.9.28386",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}Adobe Experience Manager 6.5 LTS
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Adobe",
"product": "Adobe Experience Manager 6.5 LTS",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "6.5 LTS SP3",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "6.5 LTS SP1 - Hotfix for GRANITE-71379, 6.5 LTS SP2 - Hotfix for GRANITE-71379, 6.5 LTS SP3 - Hotfix for GRANITE-71379",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}Adobe Experience Manager 6.5
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Adobe",
"product": "Adobe Experience Manager 6.5",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "6.5.25",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "6.5.23 - Hotfix for GRANITE-71379, 6.5.24 - Hotfix for GRANITE-71379, 6.5.25 - Hotfix for GRANITE-71379",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}Original source record · Cite this exact observation · Complete original publisher JSON