CVE-2026-110082: Cross-site Scripting (Reflected XSS) (CWE-79) in Adobe Adobe Experience Manager 6.5 LTS

CVE-2026-110082 is a reflected Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager 6.5 LTS. An attacker with low privileges can craft a URL that, when visited by a victim, executes malicious JavaScript within the victim's browser context. This can lead to partial compromise of confidentiality and integrity of the victim's session or data. The vulnerability scope is changed, indicating some modification in the impact or affected components. The CVSS v3.1 base score is 5.4, reflecting medium severity. No known exploits in the wild or vendor patch information are available in the provided data.

Successful exploitation can lead to execution of arbitrary JavaScript in the victim's browser, potentially allowing theft of sensitive information or session hijacking. The impact affects confidentiality and integrity but does not impact system availability. The attacker requires the victim to interact with a crafted URL, implying user interaction is necessary.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when clicking on untrusted links referencing Adobe Experience Manager 6.5 LTS pages. Monitor Adobe's security advisories for updates on patches or mitigations.