Critical severity9.3NVD Advisory· Published Sep 22, 2026· Updated Sep 25, 2026
CVE-2026-75686
CVE-2026-75686
Description
Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Affected products
3cpe:2.3:a:adobe:connect:*:*:*:*:*:-:*:*+ 1 more
- cpe:2.3:a:adobe:connect:*:*:*:*:*:-:*:*range: <12.12
- (no CPE)
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/connect/apsb26-150.htmlnvdVendor Advisory
News mentions
3- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More ThreatsThe Hacker News · Sep 28, 2026
- Adobe Patches Critical Flaws in Connect, AEM FormsSecurityWeek · Sep 23, 2026
- Adobe Patches 25 Vulnerabilities: Critical Flaws in Connect and AEM Forms Disclosed TogetherVypr Intelligence · Sep 22, 2026