CVE 9.6 CRITICAL

Adobe Connect | Deserialization of Untrusted Data (CWE-502)_CVE-2026-34659

9.6 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Basic Information

ID CVE-2026-34659
Source adobe
Published May 12, 2026 at 18:35

Affected Product

Vendor Adobe
Product Adobe Connect
Affected Versions Adobe Adobe Connect 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.