CVE-2026-47991 is an open redirect vulnerability in Adobe Experience Manager affecting versions up to and including 6.5.24 and 2026.04. The vulnerability allows attackers to construct URLs that redirect victims to untrusted, attacker-controlled websites, potentially bypassing security controls. Exploitation requires user interaction (clicking a malicious link). The vulnerability impacts confidentiality and integrity but does not affect availability. No official patch or remediation level has been provided by the vendor as of the published date.

Successful exploitation could lead to security feature bypass by redirecting users to malicious sites, which may facilitate phishing or other social engineering attacks. The impact is limited to confidentiality and integrity with no direct availability impact. User interaction is required for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with URLs received from untrusted sources and implement user awareness training to mitigate risks associated with clicking malicious links.