High 7.7Published Oct 13, 2026

CVE-2026-106634Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Updated under an hour ago (2026-10-19 10:10 UTC)

Does this affect you?

It affects Adobe Experience Manager 6.5 LTS and 1 other product. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.46%, higher than 39% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Adobe Experience Manager 6.5 LTS

Exploited in the last 30 days

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file system. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS: 7.7 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Weakness (CWE): CWE-22
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.46% (percentile 39)
Assigned by: adobe
NVD analysis: Undergoing Analysis
Record last updated: Oct 17, 2026
First seen by InfoSec Signals: Oct 13, 2026

Affected products

Affected products

Adobe Adobe Experience Manager 6.5 LTS adobe:experience_manager_6.5_lts (from the name)	through 6.5 LTS SP3; 6.5 LTS SP1 - Hotfix for GRANITE-75052, 6.5 LTS SP2 - Hotfix for GRANITE-75052, 6.5 LTS SP3 - Hotfix for GRANITE-75052 not affected	CNA record
Adobe Adobe Experience Manager 6.5 adobe:experience_manager_6.5 (from the name)	through 6.5.25; 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052, 6.5.25 - Hotfix for GRANITE-75052 not affected	CNA record

References

https://helpx.adobe.com/security/products/experience-manager/apsb26-152.htmlvendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.