CVE-2026-19479

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

• CWE-79

• https://helpx.adobe.com/security/products/experience-manager/apsb26-98.htmlVendor Advisory

Published

Sep 8, 2026

Last Modified

Sep 11, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19471Multiple stored cross-site scripting security issues exist w…6.9
• CVE-2026-19472A denial-of-service security issue exists within ArmorStart®…8.7
• CVE-2026-19474@fastify/multipart is a multipart form-data parser for Fasti…7.5
• CVE-2026-19475An authenticated user with permission to query a SQL data so…6.5
• CVE-2026-19477There is stack-based buffer overflow vulnerability recently …7.8
• CVE-2026-19478GitLab has remediated an issue in GitLab CE/EE affecting all…9.1
• CVE-2026-1948The NEX-Forms – Ultimate Forms Plugin for WordPress plugin f…4.3
• CVE-2026-19480CAI Content Credentials is affected by an Improper Input Val…7.5
• CVE-2026-19481@fastify/busboy is a multipart form-data parser. In versions…7.5
• CVE-2026-19482IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Ver…8.8
• CVE-2026-19483IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 throu…5.5
• CVE-2026-19484@fastify/busboy is a multipart form-data parser. In versions…7.5