CVE-2026-81999 Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

🗓️ 22 Sep 2026 18:55:59Reported by adobeType

High-privileged user SSRF in Adobe Experience Manager Forms JEE enables privilege escalation.

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Adobe Experience Manager Forms JEE <= 6.5.25 / 6.5 LTS SP2 Multiple Vulnerabilities (APSB26-151)	25 Sep 202600:00	–	nessus
BDU FSTEC	The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager (AEM) Forms on JEE lies in the insufficient validation of requests at the server-side level. This allows attackers to exploit their privileges.	2 Oct 202600:00	–	bdu_fstec
Circl	CVE-2026-81999	23 Sep 202601:19	–	circl
CVE	CVE-2026-81999	22 Sep 202618:55	–	cve
EUVD	EUVD-2026-84788	22 Sep 202618:55	–	euvd
NCSC	vulnerabilities in Adobe Experience Manager Forms JEE	23 Sep 202613:28	–	ncsc
NVD	CVE-2026-81999	22 Sep 202619:16	–	nvd
Positive Technologies	PT-2026-97007	22 Sep 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-81999: Server-Side Request Forgery (SSRF)	22 Sep 202600:00	–	rapid7
Vulnrichment	CVE-2026-81999 Adobe Experience Manager Forms JEE \| Server-Side Request Forgery (SSRF) (CWE-918)	22 Sep 202618:55	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "product": "AEM 6.5 Forms JEE",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "6.5.25",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.5.25 (AEMForms-6.5.0-0134 Hotfix)",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AEM 6.5 LTS Forms JEE",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "6.5 LTS SP2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.5 LTS SP3",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/aem-forms/apsb26-151.html

22 Sep 2026 18:55Current

CVSS 3.18.7

EPSS0.00806

SSVC

CWE-918