← Back to search

CVE-2026-82000

9.6 CRITICAL

Published 2026-09-22 · Updated 2026-09-23

AI risk analysis

Summary
The flaw is a Server-Side Request Forgery (SSRF) vulnerability in Adobe Experience Manager Forms JEE that allows a low-privileged attacker to gain elevated access to internal resources, potentially leading to privilege escalation.
Exploitability
Exploitation requires the attacker to have low privileges and does not require user interaction, making it relatively easy to exploit once the attacker gains initial access.
Blast radius
If exploited, the vulnerability could allow an attacker to access internal resources, potentially leading to significant data exposure or system compromise.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the latest version of Adobe Experience Manager Forms JEE as no specific fixed version is mentioned in the description.
ssrfprivilege-escalationwebjava

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Weaknesses

CWE-918

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.