CVE-2026-75710 is a DOM-based Cross-Site Scripting vulnerability in Adobe Experience Manager as a Cloud Service. This vulnerability allows attackers to manipulate the Document Object Model (DOM) environment to execute arbitrary JavaScript code within the context of a victim's browser. Successful exploitation requires the victim to interact by visiting a maliciously crafted webpage. The vulnerability affects the confidentiality and integrity of data but does not impact availability. The scope of the vulnerability is changed, indicating that the vulnerability affects resources beyond the initially vulnerable component. No patch or remediation level has been published by Adobe at this time.

An attacker who successfully exploits this vulnerability can execute arbitrary JavaScript code in the context of the victim's browser, potentially leading to information disclosure and integrity violations within the affected web application. The attack requires user interaction and does not affect system availability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a cloud service, monitor Adobe's official communications for updates on remediation. Until a fix is available, consider limiting exposure by educating users about the risks of clicking untrusted links and employing web security controls such as Content Security Policy (CSP) where feasible.