Advisories · Technology

Adobe Connect.

Every CVE that names Adobe Connect among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75689 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Android Mobile App
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2026
CVE-2026-83964 CVE record

CVSS 6.2 Medium

Adobe Connect | Improper Certificate Validation (CWE-295)
- Adobe Connect
- Adobe Connect Android Mobile App
- Weak cryptography or TLS
Not analysed yet 22 Sept 2026
CVE-2026-34689 CVE record

CVSS 8.6 High

Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- Adobe Connect
- Adobe Connect Android Mobile App
- Path traversal
Not analysed yet 22 Sept 2026
CVE-2026-75686 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Improper Input Validation (CWE-20)
- Adobe Connect
- Adobe Connect Android Mobile App
- CWE-20
Not analysed yet 22 Sept 2026
CVE-2026-75682 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Connect
- Adobe Connect Android Mobile App
- SQL injection
Not analysed yet 22 Sept 2026
CVE-2026-48361 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Android Mobile App
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2026
CVE-2026-75698 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Android Mobile App
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2026
CVE-2026-75684 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Android Mobile App
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2026
CVE-2026-75697 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Android Mobile App
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2026
CVE-2026-34659 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Adobe Connect | Deserialization of Untrusted Data (CWE-502)
- Adobe Connect
- Adobe Connect Desktop Application
- Insecure deserialization
Not analysed yet 12 May 2026
CVE-2026-34660 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Incorrect Authorization (CWE-863)
- Adobe Connect
- Adobe Connect Desktop Application
- Broken access control
Not analysed yet 12 May 2026
CVE-2026-27303 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Adobe Connect | Deserialization of Untrusted Data (CWE-502)
- Adobe Connect
- Adobe Connect Desktop Application
- Insecure deserialization
Not analysed yet 14 Apr 2026
CVE-2026-34617 CVE record

CVSS 8.7 High

Adobe Connect | Cross-site Scripting (XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Desktop Application
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2026
CVE-2026-21331 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Desktop Application
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2026
CVE-2026-27246 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Desktop Application
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2026
CVE-2026-34614 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Desktop Application
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2026
CVE-2026-27245 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Desktop Application
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2026
CVE-2026-34615 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Deserialization of Untrusted Data (CWE-502)
- Adobe Connect
- Adobe Connect Desktop Application
- Insecure deserialization
Not analysed yet 14 Apr 2026
CVE-2026-27243 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Adobe Connect Desktop Application
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2026
CVE-2025-49552 CVE record

CVSS 8.1 High

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2025
CVE-2025-49553 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2025
CVE-2025-54196 CVE record

CVSS 4.3 Medium

Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- Adobe Connect
- Open redirect
Not analysed yet 14 Oct 2025
CVE-2025-27203 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Adobe Connect | Deserialization of Untrusted Data (CWE-502)
- Adobe Connect
- Insecure deserialization
Not analysed yet 8 Jul 2025
CVE-2025-30315 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 13 May 2025
CVE-2025-30316 CVE record

CVSS 5.4 Medium

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 13 May 2025
CVE-2025-30314 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 13 May 2025
CVE-2025-43567 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 13 May 2025
CVE-2024-54048 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54050 CVE record

CVSS 6.1 Medium

Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- Adobe Connect
- Open redirect
Not analysed yet 10 Dec 2024
CVE-2024-54045 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54037 CVE record

CVSS 8.1 High

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54043 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54040 CVE record

CVSS 5.4 Medium

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54049 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54036 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54041 CVE record

CVSS 5.4 Medium

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54051 CVE record

CVSS 6.1 Medium

Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- Adobe Connect
- Open redirect
Not analysed yet 10 Dec 2024
CVE-2024-54039 CVE record

CVSS 5.4 Medium

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54042 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54034 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54044 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-49550 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54047 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54038 CVE record

CVSS 4.3 Medium

Adobe Connect | Improper Access Control (CWE-284)
- Adobe Connect
- Broken access control
Not analysed yet 10 Dec 2024
CVE-2024-54032 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2024-54046 CVE record

CVSS 6.1 Medium

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2024
CVE-2023-29305 CVE record

CVSS 6.1 Medium

Adobe Connect Reflected Cross-Site Scripting (XSS) Arbitrary code execution
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 13 Sept 2023
CVE-2023-29306 CVE record

CVSS 6.1 Medium

Adobe Connect Reflected Cross-Site Scripting (XSS) Arbitrary code execution
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 13 Sept 2023
CVE-2023-22232 CVE record

CVSS 5.3 Medium

Adobe Connect Improper Access Control Security feature bypass
- Adobe Connect
- Broken access control
Not analysed yet 17 Feb 2023
CVE-2021-40719 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Adobe Connect Deserialization of Untrusted Data Remote Code Execution
- Adobe Connect
- Insecure deserialization
Not analysed yet 21 Oct 2021
CVE-2021-40721 CVE record

CVSS 6.1 Medium

Adobe Connect Reflected Cross Site Scripting
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2021
CVE-2021-36063 CVE record

CVSS 5.4 Medium

Adobe Connect Reflected Cross-site Scripting via 'isTabletDeviceHTML' parameter
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 1 Sept 2021
CVE-2021-36061 CVE record

CVSS 5.4 Medium

Adobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting Recordings
- Adobe Connect
- CWE-657
Not analysed yet 1 Sept 2021
CVE-2021-36062 CVE record

CVSS 5.4 Medium

Adobe Connect Reflected Cross-site Scripting via 'campaign-id' parameter
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 1 Sept 2021
CVE-2021-28579 CVE record

CVSS 4.3 Medium

Adobe Connect improper access control could lead to privilege escalation
- Adobe Connect
- Broken access control
Not analysed yet 28 Jun 2021
CVE-2021-21085 CVE record

CVSS 7.8 High

Adobe Connect CSV injection via export feature could lead to code execution
- Adobe Connect
- CWE-20
Not analysed yet 12 Mar 2021
CVE-2021-21080 CVE record

CVSS 6.1 Medium

Adobe Connect Reflected Cross-site Scripting via query parameter
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 12 Mar 2021
CVE-2021-21079 CVE record

CVSS 6.1 Medium

Adobe Connect Reflected Cross-site Scripting via archiveOffset parameter
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 12 Mar 2021
CVE-2020-24443 CVE record

CVSS 6.1 Medium

Reflected Cross-Site Scripting (XSS) in Adobe Connect
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 12 Nov 2020
CVE-2020-24442 CVE record

CVSS 6.1 Medium

Reflected Cross-Site Scripting (XSS) in Adobe Connect
- Adobe Connect
- Cross-site scripting (XSS)
Not analysed yet 12 Nov 2020