Security update available for Adobe Experience Manager | APSB26-152

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

PublisherAdobe

Article IDAPSB26-152

Verified snapshot15 Oct 2026, 10:41 UTC

Linked CVEs35

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-48383Adobe Experience Manager | Incorrect Authorization (CWE-863)
CVE-2026-48382Adobe Experience Manager | Incorrect Authorization (CWE-863)
CVE-2026-110075Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-110080Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-106631Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-107682Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-83958Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-83662Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
CVE-2026-110084Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
CVE-2026-110079Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-110074Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-107305Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-106630Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-103848Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
CVE-2026-105895Adobe Experience Manager | Improper Input Validation (CWE-20)
CVE-2026-106626Adobe Experience Manager | Improper Input Validation (CWE-20)
CVE-2026-75732Adobe Experience Manager | Incorrect Authorization (CWE-863)
CVE-2026-90532Adobe Experience Manager | Incorrect Authorization (CWE-863)
CVE-2026-90531Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
CVE-2026-106628Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-106633Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-110037Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-110077Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-110082Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
CVE-2026-48398Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-83960Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-110083Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
CVE-2026-110081Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-110078Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-110076Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-110073Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-109415Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-106634Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CVE-2026-106632Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-106629Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Source and provenance

Original title: Security update available for Adobe Experience Manager | APSB26-152. Captured 15 Oct 2026, 10:41 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗