CVE-2026-47991
Adobe Experience Manager | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
09 Jun 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect (Open Redirect) vulnerability that could lead to account takeover. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim must click on a malicious link.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
Adobe · Adobe Experience ManagerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →