CVE-2026-19479

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

• CWE-79

• https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html

Published

Sep 8, 2026

Last Modified

Sep 10, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1947The NEX-Forms – Ultimate Forms Plugin for WordPress plugin f…7.5
• CVE-2026-19471Multiple stored cross-site scripting security issues exist w…6.9
• CVE-2026-19472A denial-of-service security issue exists within ArmorStart®…8.7
• CVE-2026-19474@fastify/multipart is a multipart form-data parser for Fasti…7.5
• CVE-2026-19475An authenticated user with permission to query a SQL data so…6.5
• CVE-2026-19478GitLab has remediated an issue in GitLab CE/EE affecting all…9.1
• CVE-2026-1948The NEX-Forms – Ultimate Forms Plugin for WordPress plugin f…4.3
• CVE-2026-19481@fastify/busboy is a multipart form-data parser. In versions…7.5
• CVE-2026-19483IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 throu…5.5
• CVE-2026-19484@fastify/busboy is a multipart form-data parser. In versions…7.5
• CVE-2026-19485A Predictable Resource Name vulnerability in BigQuery Import…9.3
• CVE-2026-19487Perl versions from 5.9.4 before 5.41.9 produce incorrect reg…5.3