CVE-2026-48263

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder (affected versions not specified) Adobe Experience Manager (affected versions not specified)

Description Adobe Media Encoder contains a flaw due to missing authentication for a critical function, which could allow a remote attacker to perform Cross-Site Scripting (XSS) attacks. Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) flaw, where a low-privileged attacker can inject malicious scripts into vulnerable form fields. These scripts are then executed in the browser of a victim who visits the affected page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.