CVE-2026-27303 is a deserialization of untrusted data vulnerability in Adobe Connect versions 2025.3, 12.10, and earlier. This vulnerability allows an attacker to execute arbitrary code in the context of the current user if the victim interacts with malicious content, such as a crafted URL or compromised web page. The vulnerability affects confidentiality, integrity, and availability with a critical CVSS score of 9.6. The scope of impact is changed, meaning the vulnerability can affect resources beyond the initially vulnerable component. No patch or official remediation level has been disclosed by Adobe as of the publication date.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially compromising system confidentiality, integrity, and availability. The attack requires user interaction, such as visiting a malicious URL or interacting with a compromised web page. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with URLs and web content related to Adobe Connect. No official mitigation or temporary fix has been provided by Adobe at this time.