CVE-2026-110074: Cross-site Scripting (DOM-based XSS) (CWE-79) in Adobe Adobe Experience Manager 6.5 LTS

CVE-2026-110074 is a DOM-based Cross-Site Scripting vulnerability in Adobe Experience Manager 6.5 LTS. An attacker can exploit this by manipulating the Document Object Model (DOM) environment to execute arbitrary JavaScript code within the victim's browser. Successful exploitation requires the victim to interact with a maliciously crafted webpage. The vulnerability affects confidentiality and integrity with a changed scope, meaning the impact extends beyond the initially vulnerable component. The CVSS v3.1 base score is 5.4 (medium severity), with attack vector network, low attack complexity, low privileges required, and user interaction needed.

Exploitation of this vulnerability could lead to the execution of arbitrary JavaScript in the context of the victim's browser, potentially compromising confidentiality and integrity of user data within the affected application. There is no impact on availability. The changed scope indicates that the vulnerability affects components beyond the original security boundary.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted content and avoid visiting suspicious links that could exploit this vulnerability.