CVE-2026-75719 is a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager as a Cloud Service. The flaw allows an attacker to manipulate the Document Object Model (DOM) environment to execute arbitrary JavaScript code within the context of a victim's browser. Successful exploitation requires the victim to interact by visiting a maliciously crafted webpage. The vulnerability changes the security scope and impacts confidentiality and integrity with no impact on availability. The CVSS 3.1 base score is 5.4, indicating medium severity. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

An attacker exploiting this vulnerability can execute arbitrary JavaScript in the context of the victim's browser, potentially leading to information disclosure and integrity issues within the affected web application session. The attack requires user interaction and does not impact system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a cloud service, verify with Adobe if server-side mitigations have been applied. Until an official fix is available, users should exercise caution when interacting with untrusted links or webpages that may exploit this vulnerability.