CVE-2026-48382

Summary

Adobe Experience Manager suffers from an incorrect authorization flaw that allows attackers to execute arbitrary code as any user, potentially leading to full account compromise or session hijacking without requiring user interaction.

Exploitability

The vulnerability is highly exploitable with no user interaction required, making it easy to leverage for remote code execution across the affected system.

Blast radius

If exploited, this flaw could impact all users of Adobe Experience Manager, potentially allowing attackers to gain full control over user sessions and accounts, leading to widespread unauthorized access.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

No fixed version is published. Disable the affected feature or restrict access to the named endpoint until a patch is available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.