CVEvulnerability

CVE-2026-75689

9.3 CRITICAL Published 2026-09-22 Modified 2026-09-26 Official page ↗
Status
Analyzed
Published
2026-09-22
Last modified
2026-09-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.3 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Weaknesses
CWE-79

Description

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.

Affected configurations

• adobe connect (< 12.12) • adobe connect for mobile (< 4.5)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References