CyberSIXT Search
NVD
9.3 CriticalCWE-863
CVE-2026-34660

Adobe Connect vulnerability

AdobeAdobe Connect

Status
  • Not in CISA KEV
Exploit probabilityEPSSchecked 20 Oct
1.0%probability of exploitation in the next 30 days

Higher than 63% of scored CVEs

SeverityCVSS
9.3Critical

Description NVD

Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Coverage 1 article · 1 outlet

First in our coverage: SecurityWeek, 12 MayRSS feed
  1. Adobe fixes 52 flaws, patches Connect code execution bugsSecurityWeek · first in our coverage · mentions it in passing

References

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device