Vulnerabilities
CVSS 10.0: CVE-2026-48383 Grants Unauthenticated RCE on Adobe AEM 6.5 and Cloud Service
A critical authorization flaw in Adobe Experience Manager allows attackers to run code without user interaction, affecting multiple versions.
NVD
Everything Patch Herald has reported about NVD: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.9 Critical Code Injection Flaw Hits Adobe ColdFusion 2023 and 2025
Low-privilege attackers can run code on vulnerable ColdFusion servers without user interaction, per National Vulnerability Database records.