CVE-2026-75689 is a stored Cross-Site Scripting (CWE-79) vulnerability in Adobe Connect. It enables attackers to inject malicious JavaScript into vulnerable form fields, which executes in the context of a victim's browser upon visiting the affected page. This can lead to elevated access or control over the victim's session or account. The vulnerability affects Adobe Connect versions up to and including 12.11 and 4.4. The CVSS v3.1 base score is 9.3, with vector AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N, indicating network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high confidentiality and integrity impact without availability impact.

Successful exploitation can result in execution of arbitrary JavaScript in the victim's browser, potentially leading to account compromise or session hijacking. The vulnerability impacts confidentiality and integrity with high severity but does not affect availability. No known exploits in the wild have been reported.

No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted content and consider applying any recommended workarounds from Adobe.