CVE-2026-34623 is a DOM-based Cross-Site Scripting vulnerability affecting Adobe Experience Manager versions 6.5.24, FP11.7 and earlier. An attacker can exploit this by manipulating the DOM environment to execute arbitrary JavaScript code within the victim's browser when the victim visits a specially crafted web page. The vulnerability requires user interaction and has a CVSS 3.1 base score of 5.4, indicating medium severity. No official remediation or patch has been published by Adobe as of the information provided.

Successful exploitation could allow an attacker to execute arbitrary JavaScript in the context of the victim's browser, potentially leading to information disclosure or session hijacking. The impact is limited by the requirement for user interaction and the medium severity rating. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with untrusted content and consider applying any available workarounds or security controls recommended by Adobe once available.