CVE-2026-75711 describes a DOM-based Cross-Site Scripting vulnerability in Adobe Experience Manager as a Cloud Service. An attacker can exploit this by manipulating the Document Object Model (DOM) to execute arbitrary JavaScript code within the victim's browser session. The attack requires the victim to interact by visiting a maliciously crafted webpage. The vulnerability changes the security scope and affects confidentiality and integrity with a CVSS 3.1 base score of 5.4 (medium severity). No vendor advisory or patch information is currently available.

Successful exploitation can lead to the execution of malicious scripts in the victim's browser, potentially allowing theft or manipulation of sensitive information accessible in the browser context. The impact affects confidentiality and integrity but does not affect availability. User interaction is required for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with untrusted links or webpages. Monitor Adobe's security advisories for updates regarding patches or mitigations.