CVE-2026-75732

Summary

Adobe Experience Manager suffers from an incorrect authorization flaw that allows attackers to execute arbitrary code as the current user, potentially leading to full account compromise or elevated session access without requiring user interaction.

Exploitability

The vulnerability is highly exploitable with no user interaction required, making it easy to leverage once an attacker gains initial access to the system.

Blast radius

If exploited, this flaw could impact all users of Adobe Experience Manager who have active sessions, potentially allowing attackers to gain full control over victim accounts and session contexts across the platform.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Adobe Experience Manager 2.590 or later to remediate this authorization flaw.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.