← Database

CVE-2026-121892

CRITICAL CVSS: 9.9 Published: 2026-11-10 Modified: 2026-11-10

Description

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Affected Platforms

Unknown

Weakness Type

CWE-94

References