CVE-2021-28626: Adobe Experience Manager

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue does not require user interaction.

Affected products

• Adobe Experience Manager: up to and including 6.5.8.0

Published 2021-08-24. Last modified 2026-06-17.