CVE-2026-75701 is a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager as a Cloud Service. The flaw allows attackers to execute arbitrary JavaScript by manipulating the Document Object Model (DOM) in the victim's browser after the victim visits a malicious webpage. The vulnerability requires user interaction and affects the scope of the application, potentially leading to partial confidentiality and integrity compromise. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction required, changed scope, and low impact on confidentiality and integrity, with no impact on availability.

Successful exploitation could allow an attacker to execute malicious scripts in the context of the victim's browser, potentially leading to partial disclosure or modification of information accessible to the browser session. There is no indication of availability impact. The vulnerability requires user interaction and does not appear to be actively exploited in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a cloud service, the vendor typically manages remediation server-side. Monitor Adobe's official advisories for updates. Until a fix is available, limit exposure by educating users to avoid clicking suspicious links and consider implementing Content Security Policy (CSP) headers if applicable.