CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-110076
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

CVE-2026-110075
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

CVE-2026-110074
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction – the victim must visit a crafted webpage. Scope is changed.

CVE-2026-110073
Medium

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.

CVE-2026-110037
Medium

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.

CVE-2026-109415
Medium

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.

CVE-2026-107682
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction – the victim must visit a crafted webpage. Scope is changed.

CVE-2026-107305
Medium

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.

CVE-2026-106633
Medium

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.

CVE-2026-106632
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction – the victim must visit a crafted webpage. Scope is changed.

CVE-2026-106631
Medium

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.

CVE-2026-106628
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction – the victim must visit a crafted webpage. Scope is changed.

CVE-2026-103855
Medium

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application. Exploitation requires user interaction, as a victim must open a malicious file.

CVE-2026-103853
Medium

Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction, as a victim must open a malicious file.

CVE-2026-103852
Medium

Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application. Exploitation requires user interaction, as a victim must open a malicious file.

CVE-2026-103850
Medium

Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction, as a victim must open a malicious file.

CVE-2026-97844
MediumEPSS 54%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97843
MediumEPSS 53%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97842
Medium

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97841
MediumEPSS 53%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS