{"id":"CVE-2026-121352","published":"2026-11-10T22:18:25.060","lastModified":"2026-11-11T05:19:29.783","description":"Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access to sensitive resources. Exploitation of this issue does not require user interaction. Scope is changed.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Adobe Connect contains an Incorrect Authorization (CWE-863) vulnerability allowing unauthenticated or low-privileged attackers to escalate privileges and access sensitive resources due to improper scope enforcement during authorization checks. The flaw is exploitable remotely without user interaction.","exploitability":"Exploitation requires no user interaction and can be performed remotely by an unauthenticated attacker, though successful privilege escalation may depend on specific internal state or request ordering not detailed in the public description.","blast_radius":"If exploited, this could allow attackers to gain elevated privileges within Adobe Connect, potentially accessing confidential meeting data, participant information, or administrative functions.","remediation":"Upgrade to Adobe Connect version 2.590 or later, as this is the fixed version published by Adobe for CVE-2026-121352.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","privilege-escalation","web-app","adobe-connect"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:44:41.028Z"}}