Search: CVE-2026-75697

Adobe Connect contains a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into form fields. When a victim accesses a page with the vulnerable field, the malicious script may execute in their browser, potentially leading to elevated access or control over the victim's account or session. The vulnerability affects versions up to and including 12.11 and 4.4. It has a critical severity with a CVSS score of 9.3.