CVE-2026-75732 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-75732

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability (CWE-863 ). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user, potentially leading to elevated access or control over the victim's account or session. Exploi...

CVE-2026-48382 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-48382

Adobe Experience Manager is affected by an Incorrect Authorization (CWE-863) vulnerability. This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user, potentially leading to elevated access or control over the victim's account or session. Exploitatio...

CVE-2026-106634

Adobe Experience Manager is affected by a Path Traversal vulnerability (CWE-22) caused by an improper limitation of a pathname to a restricted directory. A low-privileged attacker could exploit this issue to perform arbitrary file system writes to unauthorized locations without requiring user int...

CVE-2026-106634 Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file...

EUVD-2026-100537

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file...

CVE-2026-106626

Adobe Experience Manager is affected by an Improper Input Validation vulnerability (CWE-20) that could allow an attacker with high privileges to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction and has a CRITICAL severity ra...

CVE-2026-106626 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not...

CVE-2026-105895

Adobe Experience Manager is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user, potentially leading to elevated privileges or control over the victim's account or session. Ex...

CVE-2026-105895 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require use...

CVE-2026-103848 Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

CVE-2026-103848

Adobe Experience Manager is vulnerable to an OS Command Injection (CWE-78) caused by the improper neutralization of special elements used in an OS command. A low-privileged attacker can exploit this vulnerability to achieve arbitrary code execution in the context of the current user. This exploit...

CVE-2026-95631

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-92909

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-92464

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-110228

wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocket HTML, Pocket CSV or Shaarli import. Attackers can upload an HTML file with script but no anchor elements, leaving it at the...

CVE-2026-109429

Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as...

CVE-2026-109428

Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the extractcommands function of bash.py...

Arbitrary Code Injection

Overview dataclasses-avroschema is a Generate Avro Schemas from Python classes. Serialize/Deserialize python instances with avro schemas Affected versions of this package are vulnerable to Arbitrary Code Injection via the pydantic-class metadata field in generated annotations. An attacker can...