CVE-2026-75694 is a DOM-based Cross-Site Scripting vulnerability in Adobe Experience Manager as a Cloud Service. The flaw allows attackers to execute arbitrary JavaScript by manipulating the DOM environment when a victim visits a maliciously crafted webpage. The vulnerability requires user interaction and affects the security scope, potentially leading to partial confidentiality and integrity loss. The CVSS v3.1 base score is 5.4, reflecting medium severity. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker to execute malicious scripts in the victim's browser, potentially leading to partial disclosure of sensitive information and integrity compromise within the affected web application context. There is no reported impact on system availability. The attack requires user interaction, limiting the scope of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with untrusted or suspicious links. Monitor Adobe's security advisories for updates regarding this vulnerability.