CISA Alerts on Adobe Experience Manager Flaw Exploited for Code Execution

According to The Cybersecurity and Infrastructure Security Agency (CISA), a critical Adobe Experience Manager Forms vulnerability, tracked as CVE-2025-54253, has been added to the Known Exploited Vulnerabilities (KEV) catalog and is being actively exploited in the wild. The flaw affects the JEE deployment of Adobe Experience Manager Forms and allows attackers to execute arbitrary code on affected systems, giving threat actors remote code execution capabilities.

CISA notes that after CVE-2025-54253 was added to KEV on 15 October 2025, federal civilian agencies must patch or discontinue using the vulnerable product by 5 November 2025 under BOD 22-01, a three-week remediation window. While it remains unknown whether the flaw has been used in ransomware campaigns, its exploitation potential makes it a high-priority target for initial access.

Adobe has released security updates addressing the vulnerability, and administrators are urged to apply patches promptly or implement compensating controls if patching is not feasible.