CVE-2026-48255

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder (affected versions not specified) Adobe Experience Manager (affected versions not specified)

Description An issue exists where a lack of authentication for a critical function allows a remote attacker to perform DOM-based Cross-Site Scripting (XSS). This occurs by manipulating the Document Object Model (DOM) environment to execute malicious JavaScript within the context of the victim's browser. Successful exploitation requires user interaction, specifically that the victim visits a specially crafted webpage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.