CVE-2026-75713 is a DOM-based Cross-Site Scripting (CWE-79) vulnerability in Adobe Experience Manager as a Cloud Service. An attacker can exploit this issue by manipulating the DOM environment, causing malicious JavaScript to execute within the victim's browser context. The attack requires user interaction, meaning the victim must visit a specially crafted webpage. The vulnerability changes the security scope and impacts confidentiality and integrity with a CVSS 3.1 base score of 5.4 (medium severity). No remediation level or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation could lead to unauthorized execution of malicious scripts in the victim's browser, potentially compromising confidentiality and integrity of user data within the affected service. Availability is not impacted. The attack requires user interaction, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a cloud service, verify with Adobe if the service is managed and patched server-side. Until an official fix is available, limit exposure by educating users about the risks of clicking on untrusted links and consider implementing additional client-side protections if possible.