Adobe

Adobe Experience Manager as a Cloud Service

Response status

Unaffected

Response information checked

2026-10-24

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-27

Adobe states that AEM as a Cloud Service does not use PHP and is unaffected.

Scope: Do not apply this assessment to Adobe Commerce or other AEM configurations.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

No action is required for AEM Cloud within the scope of this notice.

Official service URL

• https://www.adobe.com/

Source URLs

1. AEM as a Cloud Service and PHP vulnerabilitieshttps://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-51874Response evidence

Adobe Commerce

Response status

Not listed

Response information checked

2026-10-27

Current re-audit: Official sources searched; no response found · Research date: 2026-10-27

Official requirements describe PHP environments; inspected public sources do not confirm Commerce-specific completion for these vulnerabilities.

Scope: Requirements and AEM's unaffected status do not prove Commerce remediation.

What users should do

Identify cloud versus on-premises deployment and PHP, then check remediation availability with Adobe Commerce support.

Official service URL

• https://www.adobe.com/

Source URLs

1. https://experienceleague.adobe.com/en/docs/commerce-operations/installation-guide/system-requirementshttps://experienceleague.adobe.com/en/docs/commerce-operations/installation-guide/system-requirementsService and operation documentation
2. https://www.adobe.com/trust/security/bulletins-and-advisories.htmlhttps://www.adobe.com/trust/security/bulletins-and-advisories.htmlService and operation documentation