CVE-2026-75743 — Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)

Description (CNA)

Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Affected (CNA)

Vendor / product	Versions
Adobe / AEM 6.5 Forms JEE	affected 0 through 6.5.25; unaffected 6.5.25 (AEMForms-6.5.0-0134 Hotfix)
Adobe / AEM 6.5 LTS Forms JEE	affected 0 through 6.5 LTS SP2; unaffected 6.5 LTS SP3

CWE

CWE-352

References

https://helpx.adobe.com/security/products/aem-forms/apsb26-151.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.