Threat Intelligence Database

Adobe Connect contains a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into form fields. When a victim accesses a page with the vulnerable field, the malicious JavaScript may execute in their browser, potentially allowing attackers to gain elevated access or control over the victim's account or session. This vulnerability affects versions up to and including 12.11 and 4.4. The CVSS score is 9.3, indicating a critical severity level.

Adobe Connect contains an improper certificate validation vulnerability (CWE-295) that could allow an attacker to disclose sensitive memory information without requiring user interaction. The vulnerability affects versions up to 12.11 and 4.4. The CVSS score is 6.2, indicating a medium severity impact focused on confidentiality. No known exploits are reported in the wild, and no patch information is currently available.

Adobe Connect contains a path traversal vulnerability (CWE-22) that allows an attacker to read arbitrary files on the file system outside of the intended directory restrictions. This vulnerability does not require user interaction and has a changed scope, indicating it may affect resources beyond the original security boundary. The issue affects versions up to and including 12.11 and 4.4. The vulnerability has a high severity with a CVSS score of 8.6.

Adobe Connect contains an improper input validation vulnerability (CWE-20) that allows an attacker to execute arbitrary code in the context of the current user. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised web page. The vulnerability affects versions up to 12.11 and 4.4. The issue has a critical severity with a CVSS score of 9.3.

CVE-2026-75682 is a critical SQL Injection vulnerability in Adobe Connect that allows a low-privileged attacker to execute arbitrary SQL commands without user interaction. This flaw could lead to arbitrary code execution in the context of the current user, potentially resulting in elevated access or control over victim accounts or sessions. The vulnerability affects Adobe Connect versions up to and including 12.11 and 4.4. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability.

Adobe Connect contains a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into form fields. When a victim accesses the affected page, the malicious JavaScript may execute in their browser. This vulnerability affects multiple versions of Adobe Connect up to 12.11 and 4.4. The vulnerability has a medium severity rating with a CVSS score of 6.1. No official patch or remediation information is provided in the available data.

Adobe Connect contains a reflected Cross-Site Scripting (XSS) vulnerability (CVE-2026-75698) that allows attackers to inject malicious scripts via crafted URLs or compromised web pages. Exploitation requires user interaction and can lead to elevated access or control over the victim's account or session. The vulnerability affects versions up to and including 12.11 and 4.4. The CVSS score is 9.3, indicating critical severity.

Adobe Connect contains a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into form fields. When a victim accesses a page with the injected script, the malicious code executes in their browser, potentially enabling attackers to gain elevated access or control over the victim's account or session. This vulnerability affects versions up to and including 12.11 and 4.4. The vulnerability has a high severity with a CVSS score of 9.3, indicating critical impact. No patch or remediation information is currently provided, and no known exploits are reported in the wild.

Adobe Connect contains a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into form fields. When a victim accesses a page with the vulnerable field, the malicious script may execute in their browser, potentially enabling the attacker to gain elevated access or control over the victim's account or session. This vulnerability affects versions up to and including 12.11 and 4.4. The vulnerability has a high severity with a CVSS score of 9.3.

Tanium addressed an unauthorized code execution vulnerability in Connect.