Search/CVE-2026-82000
● CVE — Critical

CVE-2026-82000

DiscoveredSep 22, 2026UpdatedSep 23, 2026

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS v3.1
9.6 CRITICAL
EPSS
0.73%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
2
sources referencing this CVE
Related IOCs
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityNONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Connections
4 relationships
Timeline
disclosure → media coverage
Sep 22, 2026
Disclosure — published as a CVE record.
Sep 23, 2026
securityweek.com reports: Adobe Patches Critical Flaws in Connect, AEM Forms
Sep 28, 2026
thehackernews.com reports: ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats