CVE-2024-26126

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitation of this issue requires user interaction.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jun 13, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-261273.5Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a secur CVE-2024-261285.4baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management CVE-2024-261295.3PrestaShop is an open-source e-commerce platform. Starting in version 8.1.0 and prior to version 8.1.4, PrestaShop is vulnerable to path dis CVE-2024-26137.5Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vul CVE-2024-261307.5cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior CVE-2024-261317.8Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a th CVE-2024-261323.3Element Android is an Android Matrix Client. A third-party malicious application installed on the same phone can force Element Android, vers CVE-2024-261334.9EventStoreDB (ESDB) is an operational database built to store events. A vulnerability has been identified in the projections subsystem in ve CVE-2024-261347.5cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in versio CVE-2024-261358.8MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vulnerability within t CVE-2024-261367.5kedi ElectronCord is a bot management tool for Discord. Commit aaaeaf4e6c99893827b2eea4dd02f755e1e24041 exposes an account access token in t CVE-2024-261385.3The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.Lic