
Vulnerabilities
Adobe AEM 6.5 Stored XSS Flaw CVE-2026-106629 Risks Session Hijacking
A critical stored cross-site scripting flaw in Adobe Experience Manager 6.5 allows attackers to inject scripts and potentially take over user sessions or accounts.
Everything AppSec Scoop has reported about Adobe Experience Manager: 2 stories, newest first. Part of our Vulnerabilities coverage.

A critical stored cross-site scripting flaw in Adobe Experience Manager 6.5 allows attackers to inject scripts and potentially take over user sessions or accounts.

Security teams must address CVE-2026-48383, a critical authorisation flaw allowing remote code execution in the current user context across multiple Adobe Experience Manager versions.