CVE-2026-75684 is a stored Cross-Site Scripting (CWE-79) vulnerability in Adobe Connect. It allows an attacker to inject malicious JavaScript into vulnerable form fields. When a user views the affected page, the script executes in their browser context, potentially leading to elevated privileges or session compromise. The vulnerability affects Adobe Connect versions up to and including 12.11 and 4.4. The CVSS 3.1 base score is 9.3, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality and integrity.

Successful exploitation can lead to execution of arbitrary JavaScript in the context of the victim's browser session, potentially allowing attackers to hijack user sessions, escalate privileges, or perform unauthorized actions within Adobe Connect. The vulnerability impacts confidentiality and integrity but does not affect availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Adobe's security advisories for updates. Until a patch is available, consider restricting access to vulnerable forms or applying input validation and output encoding as temporary mitigations.