Paper/Archive/CVE-2026-121349

CVE-2026-121349

Adobe Adobe Connect — Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

CVSS 9.6

critical.is priorityof 100

CVSS 9.6 (CNA)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

Affected

ProductAffectedFixed inSource

Adobe Connect≤ 12.812.8.aCNA

Adobe Connect≤ 12.912.9.aCNA

Adobe Connect≤ 12.1012.10.fCNA

Adobe Connect≤ 12.1112.11.iCNA

Adobe Connect≤ 12.1212.12.aCNA

Scores by source

adobe (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References

advisoryadobe.com/trust/security/products/connect/apsb26-191.html