Skip to content
NewA calmer, faster ZeroHour
Vulnerability

CVE-2026-121352

Incorrect authorization privilege escalation in Adobe Connect

CVSS 3.1
10.0 critical
EPSS
—
Published
·
Modified
Analyze CVE-2026-121352 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

Adobe Connect has an incorrect-authorization flaw that can escalate privileges and grant access to sensitive resources. A remote attacker can trigger it over the network without authentication or user interaction, and the impact extends beyond the vulnerable component. Connect deployments that expose this function are affected. Adobe has not listed affected builds.

What to do: Apply Adobe's update for CVE-2026-121352. No workaround is named.

ProductAffected
Adobe Connect—
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access to sensitive resources. Exploitation of this issue does not require user interaction. Scope is changed.

Weakness
CWE-863
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (—)

In the news

0 stories

No ingested article mentions this CVE yet.