CVE-2026-48262

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager (affected versions not specified) Adobe Media Encoder (affected versions not specified)

Description Adobe Experience Manager contains a DOM-based Cross-Site Scripting (XSS) flaw, where an attacker can manipulate the Document Object Model (DOM) environment to execute malicious JavaScript in the victim's browser. This requires the victim to visit a specially crafted webpage. Additionally, Adobe Media Encoder has a flaw involving a lack of authentication for a critical function, which could allow a remote attacker to perform Cross-Site Scripting (XSS) attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.