CVE-2026-110082: Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Published Oct 13, 2026
·Updated
Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.
Affected Software
1 affected component
Adobe Adobe Experience Manager
Event History
Oct 13, 2026
CVE Published
via MITRE·07:38 PM
Data Sourced
via MITRE·07:38 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Is anonymous exploitation indicated?
No. The available information states that the attacker must have low-privileged access.
2
Does exploitation require a victim to take action?
Yes. The attacker must convince a victim to visit a URL that references a vulnerable page for malicious JavaScript to execute in the victim's browser context.