CVE-2026-75629

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

• CWE-79

• https://helpx.adobe.com/security/products/experience-manager/apsb26-98.htmlVendor Advisory

Published

Sep 8, 2026

Last Modified

Sep 11, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-75621IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allo…6.2
• CVE-2026-75624IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12…8.8
• CVE-2026-75625Kraken agents fail to verify peer-to-peer downloaded blobs a…9
• CVE-2026-75626SpiderFoot fails to HTML-escape correlation titles built fro…9.3
• CVE-2026-75627Bastillion fails to properly validate request URI paths in i…9.8
• CVE-2026-75628Punk::OAuth2 versions before 0.03 for Perl allow an attacker…5.7
• CVE-2026-7563The Classified Listing – AI-Powered Classified ads & Busines…4.3
• CVE-2026-75631Photoshop Desktop is affected by an out-of-bounds write vuln…7.8
• CVE-2026-75632CAI Content Credentials is affected by an Uncontrolled Resou…7.5
• CVE-2026-75633CAI Content Credentials is affected by an Improper Input Val…5.5
• CVE-2026-75634CAI Content Credentials is affected by an Improper Input Val…4.3
• CVE-2026-75635Adobe Experience Manager is affected by a DOM-based Cross-Si…5.4