Adobe Experience Manager CVE-2026-48310

No special conditions beyond network reachability - remote unauthenticated exploitation (PR:N/UI:N/AC:L) against an exposed Adobe Experience Manager HTTP endpoint, requiring a crafted request path that supplies traversal input to reach files outside the intended directory. Impact is limited to confidentiality: the flaw yields arbitrary file read only (I:N/A:N), so it discloses data but does not by itself modify content or execute code. Limiting factors are that the target AEM instance (or its Dispatcher/publish tier) must be reachable by the attacker and running an unpatched version; instances fronted by a hardened Dispatcher/WAF that normalizes paths and blocks traversal sequences raise the practical bar.

The CVSS vector (AV:N/AC:L/PR:N/UI:N) describes a network-reachable, low-complexity, unauthenticated attack with no user interaction, which is a genuinely dangerous profile, and the changed scope plus high confidentiality impact (S:C/C:H) justify the 8.6 rating for an information-disclosure-only issue (I:N/A:N). Offsetting signals: no EPSS score was provided, the CVE is not in CISA KEV, and no proof-of-concept was referenced, so there is no public exploit identified at time of analysis and no evidence of active exploitation. The result is a high-priority patch candidate on merit of exploitability and the sensitivity of data AEM typically stores, but current threat-intelligence signals point to potential rather than observed exploitation - EPSS and KEV data are absent/negative, which should be re-checked as the CVE ages.

An unauthenticated attacker sends a crafted HTTP request to an internet-facing AEM instance in which a path parameter embeds directory-traversal sequences, causing the server to resolve and return a file outside the intended content directory. The attacker retrieves sensitive artifacts such as configuration files, credentials, or private content, then uses that data to deepen the compromise. No public proof-of-concept was referenced, and the network vector with low complexity means such a request needs no special client-side conditions.