.

Adobe Security Bulletin

Last updated on Jun 9, 2026

Security updates available for Adobe Experience Manager Forms | APSB26-57

Bulletin ID
Date published
Priority
APSB26-57
June 9, 2026
2
style
grid width 12

Summary

Adobe has released a security update for Adobe Experience Manager Forms on Java Enterprise Edition (JEE). This update addresses critical and important vulnerabilities that could lead to arbitrary code execution.

Adobe is not aware of these issues being exploited in the wild.

Affected Product Versions

Product
Affected version
Platform
Adobe Experience Manager 6.5 LTS
SP1 and earlier
Windows, macOS, Linux, iOS, Android
Adobe Experience Manager 6.5
6.5.24.0 and earlier
Windows, macOS, Linux, iOS, Android
style
grid width 12

Solution

Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version:

Product
Updated version
Platform
Priority rating
Availability
Adobe Experience Manager 6.5 LTS
SP2
All
2
Update instructions
Adobe Experience Manager 6.5
6.5.25.0
All
2
Update instructions
style
grid width 12

Vulnerability Details

Acknowledgments

Adobe would like to thank the following for reporting these issues and for working with Adobe to help protect our customers:

  • Green-jam -- CVE-2026-34691, CVE-2026-34693, CVE-2026-34694

NOTE: Adobe has a private, invite-only, bug bounty program. If you are interested in working with Adobe as an external security researcher, please fill out this form for next steps.

For more information, visit https://www.adobe.com/trust/security/bug-bounty.html, or email PSIRT@adobe.com.

CardTitle
APSB26-57
CardDescription
Priority 2 Security update
CardImage
Adobe
Created
2026-06-09
Tags
caas:content-type/documentation,caas:trust-center/security-bulletin,caas:products/adobe-experience-manager-forms
PrimaryTag
caas:content-type/article
Details
caas:mnemonics/adobe-experience-manager
Arbitrary
search: CVE-2026-34691 CVE-2026-34693 CVE-2026-34694, search: AEM Adobe Experience Manager Forms