CVE-2026-75684
Critical · CVSS 9.3- CVSS
- 9.3
- nvd
- EPSS
- —
- KEV
- No
- Class
- kernel local
- CWE-79
Description
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
References
Status: profiled · ingested 2026-09-26T00:00:19.000Z