CVE-2026-47991

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions prior to 6.5.25 Adobe Experience Manager versions prior to LTS SP2 Adobe Experience Manager versions prior to 2026.05

Description An Improper Redirect (Open Redirect) issue exists where an attacker can construct a malicious URL to redirect a victim to a site under the attacker's control, potentially leading to account takeover. This exploitation requires user interaction, specifically that the victim clicks on the malicious link.

Recommendations Update Adobe Experience Manager to a version newer than 6.5.24. Update Adobe Experience Manager to a version newer than LTS SP1. Update Adobe Experience Manager to a version newer than 2026.04.