CVE Wiki Pixee · CVE intelligence
← All CVEs

CVE-2026-75684

Critical · CVSS 9.3
CVSS
9.3
nvd
EPSS
—
KEV
No
Class
kernel local
CWE-79

Description

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.

References

Status: profiled · ingested 2026-09-26T00:00:19.000Z