ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-81999

Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

CVSS 3.1 8.7 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-81999

Published

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-81999

Published

AEM 6.5 Forms JEE

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "AEM 6.5 Forms JEE",
                    "vendor": "Adobe",
                    "versions": [
                        {
                            "lessThanOrEqual": "6.5.25",
                            "status": "affected",
                            "version": "0",
                            "versionType": "custom"
                        },
                        {
                            "status": "unaffected",
                            "version": "6.5.25 (AEMForms-6.5.0-0134 Hotfix)",
                            "versionType": "custom"
                        }
                    ]
                }

AEM 6.5 LTS Forms JEE

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "AEM 6.5 LTS Forms JEE",
                    "vendor": "Adobe",
                    "versions": [
                        {
                            "lessThanOrEqual": "6.5 LTS SP2",
                            "status": "affected",
                            "version": "0",
                            "versionType": "custom"
                        },
                        {
                            "status": "unaffected",
                            "version": "6.5 LTS SP3",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON