CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-81995 — Adobe Experience Manager Forms JEE is affected by an Improper Input Validation v...

·Source: NIST NVD

Updated:

Executive Summary

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Analysis

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. CVSS Score: 9.1. Published: 2026-09-22T19:16:52.917.

Indicators of Compromise (1)

CVE (1)
CVE-2026-81995
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 22, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Metamask discloses security incident affecting its infrastructure

On Thursday, cryptocurrency wallet provider MetaMask has disclosed an ongoing infrastructure security incident affecting some of its infrastructure. [...]

BleepingComputer
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2025-41753 — The object name of a dynamically created BACnet File Object is interpreted as a ...

The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.

CVE-2025-41753
NIST NVD
MEDIUMVulnerabilityPOC

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. The code causes a crash, not an execution error. Turning the memory corruption into a working

CVE-2026-86950
The Hacker News