CVE-2026-75724 is a DOM-based Cross-Site Scripting (CWE-79) vulnerability in Adobe Experience Manager as a Cloud Service. An attacker can exploit this issue by manipulating the Document Object Model (DOM) environment to execute arbitrary JavaScript code within the victim's browser. The attack requires the victim to interact by visiting a specially crafted webpage. The vulnerability affects the confidentiality and integrity of data but does not impact availability. The scope of the vulnerability is changed, indicating that the vulnerability affects components beyond the initially vulnerable component.

Successful exploitation could lead to the execution of malicious scripts in the context of the victim's browser, potentially allowing theft of sensitive information or session tokens. The CVSS vector indicates network attack vector, low attack complexity, privileges required, user interaction required, changed scope, and low impact on confidentiality and integrity with no impact on availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a cloud service, Adobe may manage remediation server-side; verify with Adobe's official advisory. Until a fix is available, users should exercise caution when interacting with untrusted web content. No official fix or temporary workaround has been documented in the provided data.