CVE-2026-81999
Medium
Elevated severity or exploit probability.
CVSS base
8.7
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
EPSS — probability of exploitation (30 days)
0.8%
55.0th percentile
CISA KEV
Not listed
Weakness / dates
CWE-918
Published 2026-09-22 · modified 2026-09-23
Description
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.