CVE-2026-48254

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager (affected versions not specified) Adobe Media Encoder (affected versions not specified)

Description Adobe Experience Manager and Adobe Media Encoder are affected by a DOM-based Cross-Site Scripting (XSS) issue. This occurs when an attacker manipulates the Document Object Model (DOM)—the programming interface for HTML and XML documents—to execute malicious JavaScript in the victim's browser. In Adobe Media Encoder, the issue is linked to a lack of authentication for a critical function. Exploitation requires user interaction, such as visiting a specially crafted webpage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.