Product:
Adobe Connect
Summary
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim’s account or session. Exploitation requires user interaction, as a victim must visit a maliciously crafted URL or interact with a compromised web page.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.3 | CVE-2026-34660 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious URL or web page that the victim is likely to visit. Once the victim interacts with the malicious content, the attacker can execute arbitrary code in the context of the victim’s session, potentially leading to unauthorized access or control over the victim’s account.
Affected Products
- Adobe Connect versions 2025.9.15 and earlier: Affected by an Incorrect Authorization vulnerability allowing arbitrary code execution.
Mitigation
To mitigate this vulnerability, users should avoid interacting with untrusted links or web pages. Adobe recommends updating to the latest version of Adobe Connect to ensure that the vulnerability is patched and to follow best security practices to minimize exposure.