CVE-2026-48310 Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

[
  {
    "defaultStatus": "affected",
    "product": "Adobe Experience Manager as a Cloud Service",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2026.5.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "2026.6.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "Adobe Experience Manager 6.5 LTS",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "SP1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "SP2 - Hotfix for NPR-43972",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "Adobe Experience Manager 6.5",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "6.5.24",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.5.25 - Hotfix for NPR-43972",
        "versionType": "custom"
      }
    ]
  }
]