CVE-2026-48355

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager (affected versions not specified) Adobe Media Encoder (affected versions not specified)

Description Adobe Experience Manager contains a stored Cross-Site Scripting (XSS) issue where a low-privileged attacker can inject malicious scripts into vulnerable form fields. These scripts execute in the browser of a user visiting the affected page. Adobe Media Encoder is affected by a lack of authentication for a critical function, which allows a remote attacker to perform Cross-Site Scripting (XSS) attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.