CVE-2026-48253

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager (affected versions not specified) Adobe Media Encoder (affected versions not specified)

Description Adobe Experience Manager and Adobe Media Encoder are affected by DOM-based Cross-Site Scripting (XSS), a flaw where an attacker manipulates the Document Object Model (DOM) to execute malicious JavaScript in the victim's browser. In Adobe Experience Manager, exploitation requires the victim to visit a specially crafted webpage. In Adobe Media Encoder, the issue stems from a lack of authentication for a critical function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.