CVE-2026-47991

6.1 mediumEPSS 0.2%

Medium (6.1) in adobe experience manager. EPSS 0.2% chance of exploitation in the next 30 days.

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim must click on a malicious link. Scope is changed.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2026-06-09
Modified: 2026-08-28
Record from: the NVD, synced 2026-10-19

Affected

adobe:experience_manager

References

https://helpx.adobe.com/security/products/experience-manager/apsb26-56.html

Check your stack JSON