Preliminary research

More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE

Dylan Pindur · Searchlight Cyber

AI-collected research leads through 16 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Chains dispatcher/Sling parsing differences and anonymous bulk import into in-band XXE, IMS service-credential disclosure and authenticated asynchronous Groovy execution. The full unauthenticated RCE chain applies to AEM Cloud; individual components also motivate on-premises updates.

Record

Researcher

Dylan Pindur

Published by

Searchlight Cyber

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• Earlier AEM research

Tags

• parser-differential
• xxe
• file-read
• auth-bypass
• rce
• owasp-a01-2021
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Dylan Pindur, first published at the original source. Preserved copies are kept so the citation survives its host.