CVE-2026-75717 describes a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager as a Cloud Service. The flaw allows attackers to inject and execute malicious scripts by manipulating the Document Object Model (DOM) in the victim's browser. Successful exploitation depends on the victim interacting with a crafted webpage. The vulnerability affects confidentiality and integrity with no impact on availability. The scope of the vulnerability is changed, indicating that the vulnerability affects resources beyond the initially vulnerable component.

An attacker who successfully exploits this vulnerability can execute arbitrary JavaScript in the context of the victim's browser, potentially leading to information disclosure and integrity violations. The attack requires user interaction (visiting a maliciously crafted webpage). There is no known impact on system availability. The vulnerability has a medium severity level with a CVSS 3.1 base score of 5.4.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a cloud service, verify with Adobe whether the vulnerability has been mitigated server-side. Until an official fix or mitigation is confirmed, users should exercise caution when interacting with untrusted links or webpages. No official remediation or temporary fix information is currently available.