PT-2026-96988 · Adobe · Connect
CVE-2026-75698
·
Published
2026-09-22
·
Updated
2026-09-25
CVSS v2.0
9.4
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Connect (affected versions not specified)
Description
Adobe Connect contains a reflected Cross-Site Scripting (XSS) flaw, which occurs when an application includes untrusted data in a web page without proper validation. This allows an attacker to inject malicious scripts into a page, potentially leading to elevated access or control over the victim's account or session. Successful exploitation requires user interaction, such as visiting a maliciously crafted URL or interacting with a compromised web page.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Connect