Skip to content
NewA calmer, faster ZeroHour
Vulnerability

CVE-2026-121356

Unauthenticated SSRF in Adobe Connect

CVSS 3.1
10.0 critical
EPSS
—
Published
·
Modified
Analyze CVE-2026-121356 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

Adobe Connect has a server-side request forgery flaw that can lead to privilege escalation and a changed security scope. An unauthenticated attacker can trigger it over the network with no user interaction. Successful exploitation can disclose and alter data. Adobe has not listed affected or fixed versions.

What to do: Apply Adobe's update for CVE-2026-121356. No workaround is named.

ProductAffected
Adobe Connect—
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Weakness
CWE-918
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (—)

In the news

0 stories

No ingested article mentions this CVE yet.