CVE-2025-49533

9.8 criticalEPSS 52%

Critical (9.8) in adobe experience manager. EPSS 52% chance of exploitation in the next 30 days.

Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 52% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2025-07-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:experience_manager

References

https://helpx.adobe.com/security/products/aem-forms/apsb25-67.html

Check your stack JSON