CVE-2026-103848

Summary

Adobe Experience Manager is vulnerable to OS command injection due to improper neutralization of special elements in OS commands, allowing low-privileged attackers to execute arbitrary code with the privileges of the current user. This critical vulnerability can lead to complete system compromise.

Exploitability

Exploitation is relatively straightforward for low-privileged attackers as it requires no user interaction and can be triggered through vulnerable command execution paths.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code on the AEM server with the privileges of the current user, potentially leading to full system compromise and data exfiltration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

No fixed version is published in the description. Disable the affected feature or restrict access to the named endpoint until a patch is available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.