CVE-2026-75716 is a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager as a Cloud Service. The flaw allows attackers to execute arbitrary JavaScript by manipulating the Document Object Model (DOM) within the victim's browser. Successful exploitation depends on user interaction, requiring the victim to visit a maliciously crafted webpage. The vulnerability impacts confidentiality and integrity but does not affect availability. The scope of the vulnerability is changed, indicating that the impact crosses security boundaries within the application environment. No vendor-provided remediation or patch information is currently available.

The vulnerability enables an attacker to execute malicious JavaScript in the context of a victim's browser, potentially leading to partial confidentiality and integrity compromise of user data within the affected service. There is no indication of availability impact. Exploitation requires user interaction, which limits the attack vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with untrusted links or webpages that could exploit this vulnerability. Monitor Adobe's security advisories for updates regarding patches or mitigations.