CVE-2026-34659 is a deserialization of untrusted data vulnerability in Adobe Connect that allows an attacker to execute arbitrary code in the context of the current user. This vulnerability affects Adobe Connect versions 2025.9.15, 2025.8.157, and earlier. Exploitation requires user interaction, such as visiting a maliciously crafted URL or interacting with a compromised web page. The vulnerability changes the security scope and has a CVSS 3.1 base score of 9.6, reflecting critical severity with network attack vector, low attack complexity, no privileges required, but user interaction needed, and impacts on confidentiality, integrity, and availability.

Successful exploitation can result in arbitrary code execution with the privileges of the current user, potentially leading to full compromise of the affected system or application data. The vulnerability affects confidentiality, integrity, and availability, making it critical. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Adobe's security advisories for updates. Until a patch is available, users should avoid interacting with untrusted URLs or web pages that could exploit this vulnerability.