Adobe Security Bulletin

Last updated on June 9, 2026

Security updates available for Adobe Experience Manager | APSB26-56

Bulletin ID
Date published
Priority
APSB26-56
June 9, 2026
3
style
grid width 12

Summary

Adobe has released updates for Adobe Experience Manager (AEM). This update resolves vulnerabilities rated important and moderate. Successful exploitation of these vulnerabilities could result in arbitrary code execution and security feature bypass.

Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates.

Affected product versions

Product
Version
Platform
Adobe Experience Manager (AEM)
AEM Cloud Service (CS)
All
Adobe Experience Manager (AEM)
6.5 LTS SP1 and earlier
SP24 and earlier
All
style
grid width 12

Solution

Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version:

Product
Version
Platform
Priority
Availability
Adobe Experience Manager (AEM)
AEM Cloud Service (CS) Release 2026.05
All
3
Release Notes
Adobe Experience Manager (AEM)
6.5 LTS Service Pack 2
All
3
Release Notes
Adobe Experience Manager (AEM)
6.5 Service Pack 25
All
3
Release Notes
style
grid width 12

Note

Customers running on Adobe Experience Manager's Cloud Service will automatically receive updates that include new features as well as security and functionality bug fixes.

Note

Experience Manager Security Considerations:

AEM as a Cloud Service Security Considerations

Anonymous Permission Hardening Package

Note

Please contact Adobe customer care for assistance with AEM versions 6.4, 6.3 and 6.2.

style
xl spacing, one up, grid width 8, static-links, xxl-spacing-top

Vulnerability Details

Acknowledgments

Adobe would like to thank the following for reporting these issues and for working with Adobe to help protect our customers:

  • green-jam: CVE-2026-47936, CVE-2026-47941, CVE-2026-47943, CVE-2026-47944, CVE-2026-47945, CVE-2026-47946, CVE-2026-47947, CVE-2026-47948, CVE-2026-47949, CVE-2026-47950, CVE-2026-47951, CVE-2026-47953, CVE-2026-47954, CVE-2026-47956, CVE-2026-47957, CVE-2026-47958, CVE-2026-47962, CVE-2026-47966, CVE-2026-47970, CVE-2026-47972, CVE-2026-47981, CVE-2026-47982, CVE-2026-47983, CVE-2026-47985, CVE-2026-47986, CVE-2026-47987, CVE-2026-47989, CVE-2026-47993, CVE-2026-34692, CVE-2026-48250, CVE-2026-48251, CVE-2026-48256, CVE-2026-48258, CVE-2026-48264, CVE-2026-48265, CVE-2026-48266, CVE-2026-48268, CVE-2026-48271, CVE-2026-48280, CVE-2026-48297
  • anonymous_blackzero: CVE-2026-47939, CVE-2026-47973, CVE-2026-47974, CVE-2026-47975, CVE-2026-47977, CVE-2026-47978, CVE-2026-47980, CVE-2026-48288, CVE-2026-48289, CVE-2026-48299, CVE-2026-48300, CVE-2026-48301, CVE-2026-48304
  • lpi: CVE-2026-47935, CVE-2026-47942
  • Marco Ventura, Claudia Bartolini and Massimiliano Brolli of TIM Security Red Team Research - TIM S.p.A: CVE-2026-47990

NOTE: Adobe has a public bug bounty program with Intigriti. If you are interested in working with Adobe as an external security researcher, please check out https://app.intigriti.com/programs/adobe/adobepublic/detail.

For more information, visit https://www.adobe.com/trust/security/bug-bounty.html, or email PSIRT@adobe.com.

CardTitle
APSB26-56
CardDescription
Priority 3 Security update
CardImage
Adobe
Created
2026-06-09
Tags
caas:content-type/documentation,caas:trust-center/security-bulletin,caas:products/adobe-experience-manager
PrimaryTag
caas:content-type/article
Details
caas:mnemonics/adobe-experience-manager
Arbitrary
search: CVE-2026-47935 CVE-2026-47936 CVE-2026-47939 CVE-2026-47941 CVE-2026-47942 CVE-2026-47943 CVE-2026-47944 CVE-2026-47945 CVE-2026-47946 CVE-2026-47947 CVE-2026-47948 CVE-2026-47949 CVE-2026-47950 CVE-2026-47951 CVE-2026-47953 CVE-2026-47954 CVE-2026-47956 CVE-2026-47957 CVE-2026-47958 CVE-2026-47962 CVE-2026-47966 CVE-2026-47970 CVE-2026-47972 CVE-2026-47973 CVE-2026-47974 CVE-2026-47975 CVE-2026-47977 CVE-2026-47978 CVE-2026-47980 CVE-2026-47981 CVE-2026-47982 CVE-2026-47983 CVE-2026-47985 CVE-2026-47986 CVE-2026-47987 CVE-2026-47989 CVE-2026-47990 CVE-2026-47993 CVE-2026-34692 CVE-2026-48250 CVE-2026-48251 CVE-2026-48256 CVE-2026-48258 CVE-2026-48264 CVE-2026-48265 CVE-2026-48266 CVE-2026-48268 CVE-2026-48271 CVE-2026-48280 CVE-2026-48297 CVE-2026-48299 CVE-2026-48300 CVE-2026-48301 CVE-2026-48304 CVE-2026-47991 CVE-2026-48288 CVE-2026-48289