CVE-2026-48261

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder (affected versions not specified) Adobe Experience Manager (affected versions not specified)

Description An issue exists where a lack of authentication for a critical function allows a remote attacker to perform DOM-based Cross-Site Scripting (XSS). This occurs when an attacker manipulates the Document Object Model (DOM)—the programming interface for HTML and XML documents—to execute malicious JavaScript within the victim's browser. Successful exploitation requires user interaction, specifically that the victim visits a specially crafted webpage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.