Browse CVEs

HIGH 8.6 CVE-2026-48252 Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. … Experience Manager after 2020.5.0 Fix from $1,9502026-07-14 MEDIUM 5.4 CVE-2026-48253 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th… Experience Manager after 2020.5.0 Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-48254 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th… Experience Manager after 2020.5.0 Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-48255 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th… Experience Manager after 2020.5.0 Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-48257 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th… Experience Manager after 2020.5.0 Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-48260 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th… Experience Manager after 2020.5.0 Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-48261 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th… Experience Manager after 2020.5.0 Fix from $1,6002026-07-14 MEDIUM 6.1 CVE-2026-48000 Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could co… Commerce 1.21.0+ Fix from $1,6002026-07-14 MEDIUM 5.9 CVE-2026-47998 Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage thi… Commerce 1.21.0+ Fix from $1,6002026-07-14 HIGH 8.7 CVE-2026-47994 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious… Commerce 1.21.0+ Fix from $1,9502026-07-14 HIGH 8.6 CVE-2026-47988 Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage thi… Commerce 1.21.0+ Fix from $1,9502026-07-14 HIGH 8.2 CVE-2026-47984 Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage thi… Commerce 1.21.0+ Fix from $1,9502026-07-14 HIGH 8.1 CVE-2026-47995 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject maliciou… Commerce 1.21.0+ Fix from $1,9502026-07-14 HIGH 7.2 CVE-2026-47992EPSS 20% Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result… Commerce 1.21.0+ Fix from $1,9502026-07-14 MEDIUM 6.8 CVE-2026-47996EPSS 20% Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. A high-privileged attacker coul… Commerce 1.21.0+ Fix from $1,6002026-07-14 MEDIUM 5.9 CVE-2026-47997EPSS 9% Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage thi… Commerce 1.21.0+ Fix from $1,6002026-07-14 HIGH 7.8 CVE-2026-48309 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48365 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48368 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-47967 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-47968 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 MEDIUM 5.5 CVE-2026-47969 Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulner… Audition 25.6.6 / 26.3+ Fix from $1,6002026-07-14 HIGH 8.2 CVE-2026-48364 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $1,9502026-07-13 HIGH 8.2 CVE-2026-48363 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $1,9502026-07-13 MEDIUM 5.5 CVE-2026-48267 DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-servic… Dng Software Development Kit 1.7.1.2611+ Fix from $1,6002026-07-06 CRITICAL 10.0 CVE-2026-48316 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execut… Coldfusion Mitigation only Fix from $2,3002026-07-06 CRITICAL 9.3 CVE-2026-48313 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vul… Coldfusion Mitigation only Fix from $2,3002026-06-30 CRITICAL 9.3 CVE-2026-48315 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execut… Coldfusion Mitigation only Fix from $2,3002026-06-30 MEDIUM 6.5 CVE-2026-48314 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vul… Coldfusion Mitigation only Fix from $1,6002026-06-30 CRITICAL 10.0 CVE-2026-48282 KEVEPSS 99% ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vul… Coldfusion Mitigation only Fix from $2,3002026-06-30