Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.4 MEDIUM
CVE-2026-110078 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-110077 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-110076 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-110075 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-110074 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-110073 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-110037 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
0.0 NA
CVE-2026-110005 — Moghtech Komodo contains an OS command injection vulnerability

The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus …

| Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-109415 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-107682 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-107305 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.7 HIGH
CVE-2026-106634 — Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('…

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. A low-privile…

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-106633 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-106632 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-106631 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Ma…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
9.3 CRITICAL
CVE-2026-106630 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaSc…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
9.3 CRITICAL
CVE-2026-106629 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaSc…

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.4 MEDIUM
CVE-2026-106628 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript …

experience_manager dng_software_development_kit | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
9.1 CRITICAL
CVE-2026-106626 — Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges c…

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
9.9 CRITICAL
CVE-2026-105895 — Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated acces…

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
Showing 20 of 16498 Results