Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-121889 EUVD-2026-122978GHSA-qq88-75g7-pq5c

Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)

Published Nov 10, 2026 · Updated Nov 11, 2026 · Assigned by adobe

Description

Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Affected products

VendorProductAffectedFixed
Adobe Adobe Connect ≤ 12.8, ≤ 12.9, ≤ 12.10, ≤ 12.11, ≤ 12.12 12.8.a

Advisories 1

References