Vulnerabilities
CVSS 10.0: CVE-2026-48383 Grants Unauthenticated RCE on Adobe AEM 6.5 and Cloud Service
A critical authorization flaw in Adobe Experience Manager allows attackers to run code without user interaction, affecting multiple versions.
Critical Vulnerability
Everything Patch Herald has reported about Critical Vulnerability: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.6 ColdFusion Flaw Lets Low-Priv Users Write Data Without Interaction
Adobe ColdFusion versions up to 2025.0.13 and 2023.0.25 face a critical authorization bypass that requires no user action to exploit.
Vulnerabilities
CVSS 9.9 Critical Code Injection Flaw Hits Adobe ColdFusion 2023 and 2025
Low-privilege attackers can run code on vulnerable ColdFusion servers without user interaction, per National Vulnerability Database records.