Search/CVE-2026-75745
● CVE — Critical

CVE-2026-75745

DiscoveredSep 22, 2026UpdatedSep 26, 2026

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

View graph Watch Export
CVSS v3.1
10 CRITICAL
EPSS
1.17%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
3
sources referencing this CVE
Related IOCs
4
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Connections
5 relationships
Timeline
disclosure → media coverage
Sep 22, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 26, 2026
Sep 23, 2026
securityweek.com reports: Adobe Patches Critical Flaws in Connect, AEM Forms
Sep 23, 2026
advisories.ncsc.nl reports: NCSC-2026-0390 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Experience Manager Forms JEE
Sep 28, 2026
thehackernews.com reports: ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats