CVE-2025-54253

🔥 Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-08-05

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.

Affected Platforms (CPE)

📦

Adobe

Experience Manager Forms

<= 6.5.23.0

References & Advisories

🔗 https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html

🔗 https://slcyber.io/assetnote-security-research-center/struts-devmode-in-2025-critical-pre-auth-vulnerabilities-in-adobe-experience-manager-forms/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54253

CVE-2025-54253

Vulnerability Description

Affected Platforms (CPE)

Experience Manager Forms

References & Advisories

Related Security Intelligence Articles

Global Cyber Intel Digest: July 21, 2026

Related Vulnerabilities