CISA warns that attackers are actively exploiting a critical vulnerability in Adobe Experience Manager (AEM), leading to remote code execution. Organizations are urged to apply patches or mitigate risks quickly, especially federal agencies under specific directives. #AdobeExperienceManager #CVE202554253
Keypoints
- Attackers are exploiting a high-severity vulnerability in Adobe Experience Manager Forms.
- The flaw, CVE-2025-54253, allows remote code execution without user interaction.
- Adobe released patches for the vulnerability on August 9th after disclosure and exploitation proofs appeared.
- CISA has added this vulnerability to its Exploited Vulnerabilities Catalog, mandating federal agency patching by November 5th.
- Organizations are advised to follow vendor mitigations and restrict access if immediate patching isn’t possible.