SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-19232

CRITICAL · CVSS 9.9 EPSS 0.57% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

Adobe Experience Manager is vulnerable to an Incorrect Authorization flaw that allows low-privileged attackers to execute arbitrary code, potentially gaining elevated access to user accounts or sessions without requiring any user interaction. Organizations using this platform should prioritize patching this critical vulnerability to prevent unauthorized access and potential compromise of sensitive data. Immediate action is essential to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-19232
Severity
CRITICAL
CVSS
9.9
EPSS
0.57%

Original NVD Description

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

Related CVEs

Other vulnerabilities affecting the same vendor(s)