CVE-2026-75697 is a stored Cross-Site Scripting (CWE-79) vulnerability in Adobe Connect. It permits attackers to inject malicious JavaScript into vulnerable form fields, which executes in the context of a victim's browser upon visiting the affected page. This can lead to elevated privileges or session control. The vulnerability affects Adobe Connect versions up to and including 12.11 and 4.4. The CVSS v3.1 score is 9.3, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality and integrity.

Successful exploitation can lead to execution of arbitrary scripts in the victim's browser, potentially allowing attackers to hijack user sessions, steal sensitive information, or perform actions on behalf of the victim with elevated privileges. The scope change indicates that the vulnerability can affect resources beyond the vulnerable component.

No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when interacting with untrusted content in Adobe Connect. Consider applying any available workarounds or restrictions on input fields if recommended by Adobe.