Maintenance Release Notes maintenance-release-notes
The following section outlines the technical release notes for the maintenance release of Experience Manager as a Cloud Service associated with 2026.5.0 feature activation.
Release 26309 release-26309
Summarized below are the continuous improvements for maintenance release 26309, which was publicly released on May 26, 2026. The previous maintenance release was release 25892.
The 2026.5.0 feature activation provides the full feature set for this maintenance release. See the Experience Manager Releases Roadmap for more information.
Enhancements enhancements-26309
- ASSETS-56957: Added multi-audio track and multi-caption upload support for videos in Dynamic Media with OpenAPI.
- ASSETS-58563: Added Adobe Commerce integration to AEM Assets.
- ASSETS-65603: Improved Folder listing performance in Touch UI by allowing configuration of a reduced asset count.
- ASSETS-66032: Added advanced networking proxy support to Assets Bulk Import for environments with IP-restricted cloud storage.
- CQ-4363346: Enhanced the Translation Guideline UI with support for downloading sample guidelines, uploading guideline files in JSON, PDF, and DOCX formats, and deleting existing guidelines.
- GRANITE-67514: Isolated an internal caching library bundle to prevent transform job failures and conflicts with customer-deployed bundles.
- SITES-42076: Experimental: Added bulk find-and-replace operations for pages as MCP primitives in the Content API.
- SITES-42835: Experimental: AEM Forms pages created outside the Content API are now accessible via the AEM Sites Content API without requiring migration or schema changes.
- SITES-44265: Added a stable replicated page identifier to the Content API that remains valid after page moves, preventing stale-reference 404 errors.
Fixed Issues fixed-issues-26309
- ASSETS-36208: Fixed image profiles not appearing in folder properties when Dynamic Media is disabled.
- ASSETS-63240: Fixed bulk multi-select Relate operations in Append Mode leaving users on a blank page instead of returning to the Assets console.
- ASSETS-65076: Fixed an incorrect protocol value being passed to the Externalizer API, which caused failures when using Sling request builders.
- ASSETS-66102: Fixed Adobe I/O Runtime asset publish events reporting an incorrect
repo:versionvalue, which caused failures in downstream integrations. - ASSETS-66226: Fixed assets not being removed from the delivery tier upon deletion when their approval status was stored with mixed-case values.
- ASSETS-66669: Fixed the Home button on the Search Results page not navigating to the Start screen in Touch UI when Unified Shell is enabled.
- ASSETS-66683: Fixed an approval loop in Dynamic Media with OpenAPI triggered by upload failures, which created backlogs and disrupted asset approval workflows.
- ASSETS-67113: Fixed Bulk Import ignoring SVG assets when filtering by MIME type
image/svg+xml. - CQ-4363466: Fixed cloud configuration path resolution failures affecting third-party translation connectors that use custom configuration resolution.
- CQ-4363355: Fixed translation requests in the GenAI Translation Connector being routed to an incorrect regional endpoint due to a hardcoded static URL.
- SITES-44186: Fixed meta tag injection on Author breaking Page Editor event handling for some customers.
Known Issues known-issues-26309
None.
Deprecated Features and APIs deprecated-26309
Deprecated and removed features and APIs in AEM as a Cloud Service are detailed in the Deprecated and Removed Features and APIs document.
Security Fixes security-26309
AEM as a Cloud Service is dedicated to optimizing your platform’s security and performance. This maintenance release addresses 19 vulnerabilities, reinforcing our commitment to robust system protection.
Embedded Technologies embedded-tech-26309
Release 25892 release-25892
Summarized below are the continuous improvements for maintenance release 25892, which was publicly released on May 7, 2026. The previous maintenance release was release 25520.
The 2026.5.0 feature activation provides the full feature set for this maintenance release. See the Experience Manager Releases Roadmap for more information.
This upgrade disables the
TLS_RSA cipher suites as they do not preserve forward-secrecy.Attempts to access external systems from AEM using cipher suites starting with
TLS_RSA_ will fail with an SSLHandshakeException.Enhancements enhancements-25892
- CQ-4362304: Create Guidelines frontend and update LLM config UI.
- GRANITE-39546: Upgrade Apache Tika to 3.x.
- GRANITE-53957: Upgrade Azure SDK V8 to V12 for oak-blob-azure.
- GRANITE-61245: Remove all usage of commons-lang (replace with commons-lang3).
- GRANITE-64748: Bump OIDC authentication handler.
- GRANITE-64764: Update Apache Commons Text to 1.15.0.
- GRANITE-64963: Update Filevault to 4.2.0.
- GRANITE-66197: Add Microsoft Graph API email support for M365 tenants.
- GRANITE-66449: Update Maven plugins for Java 17 API support.
- GRANITE-66473: Add Caffeine cache library to base-granite.
- GRANITE-66836: Update Quickstart to Oak 2.0.0.
- SKYOPS-129301: Set APIs jar Javadoc compliance level to Java 17.
- SKYOPS-129351: Update reactive-streams and reactor-core for MCP SDK compatibility.
- SKYOPS-131412: Update Apache Commons Exec to latest version.
- SKYOPS-131432: Update Felix SCR to 2.2.14.
- SKYOPS-131907: Update Sling API Regions to 1.1.10.
- SKYOPS-131938: Update GSON to latest version.
- SKYOPS-132173: Update Apache Commons Codec to latest version.
- SKYOPS-132182: Update Sling Tenant bundle.
- SKYOPS-132267: Update
org.osgi.service.componentannotation. - SKYOPS-132272: Update Sling Feature Model bundle.
- SKYOPS-132525: Add Quickstart analyser to prevent new API removals.
- SKYOPS-134408: Update
com.adobe.granite.asset.coreto 2.2.82. - SKYOPS-137750: Update
com.adobe.granite.commentsto 1.0.40. - SKYOPS-137759: Update
com.adobe.granite.jobs.async.ui.commonsto 3.2.4. - SKYOPS-138356: Update
com.adobe.granite.oauth.serverto 1.1.36. - SKYOPS-138739: Update SnakeYAML to 2.6.
Fixed Issues fixed-issues-25892
- ASSETS-59546: Remove dependencies on deprecated commons-lang library.
- ASSETS-64831: AssetProcessorProcess resetting processing attempt count causes stuck assets.
- ASSETS-66683: Approval loop caused by uploadBlob failure.
- CNTBF-613: Fix Access Denied (JCR-101) when registering node types.
- GRANITE-44537: String in “Country/Region” not localized in AEM.
- GRANITE-61760: Fix failed activation of AdminUserInitializer.
- GRANITE-64543: Permission restrictions response does not follow API structure.
- GRANITE-66692: Internal classloader not sensitive to package refreshes.
- GRANITE-66732: Use activators instead of service components for start level 1 bundles.
- GRANITE-66846: AEM Permissions API does not show
rep:ntNamesrestriction. - SITES-39267: Restore pagePath in relationship chain entries.
- SITES-43715: Permission validation fails reading the resource status.
AEM Guides guides-25892
- GUIDES-45110: When selecting an image in the Editor using the Select file dialog, only raster formats (such as JPG, PNG, and GIF) are displayed. Vector files (such as
.aiand.eps) are not shown and cannot be selected. - GUIDES-41938: Creating a topic in a folder with spaces in its name incorrectly creates a duplicate folder where spaces are replaced by hyphens, and the topic is saved there instead of the original folder.
- GUIDES-38377: When changes to an output preset in a Folder profile are applied to existing maps, the saved Publish Context for the AEM Sites preset is reset.
- GUIDES-43547: When large topics or maps are opened, the Author instance becomes unresponsive, requiring a restart in some cases.
- GUIDES-32520: When Backspace is used on elements, the Editor scrolls to the top of the topic regardless of the cursor position (Editor 2.0).
For more information about the new and enhanced features and issues fixed in the release, view the Experience Manager Guides release roadmap.
Known Issues known-issues-25892
None.
Deprecated Features and APIs deprecated-25892
Deprecated and removed features and APIs in AEM as a Cloud Service are detailed in the Deprecated and Removed Features and APIs document.
Security Fixes security-25892
AEM as a Cloud Service is dedicated to optimizing your platform’s security and performance. This maintenance release addresses 19 identified vulnerabilities, reinforcing our commitment to robust system protection.