{"id":"CVE-2026-121889","published":"2026-11-10T22:18:26.180","lastModified":"2026-11-11T05:19:30.863","description":"Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Adobe Connect contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that allows an unauthenticated attacker to manipulate the application into making unintended internal or external HTTP requests, potentially leading to privilege escalation due to a changed scope.","exploitability":"Exploitation requires no user interaction or prior authentication and leverages network-accessible SSRF entry points in Adobe Connect.","blast_radius":"Successful exploitation could enable attackers to access internal services, bypass network segmentation, and escalate privileges within the Adobe Connect environment.","remediation":"Upgrade to Adobe Connect version 2.590 or later; if that version is not yet available, restrict SSRF-prone endpoints to trusted IP ranges and disable unnecessary outbound request functionality per Adobe security advisory guidance.","detection":"Defenders should monitor for anomalous outbound HTTP/HTTPS requests from the Adobe Connect server to internal IP ranges (e.g., 10.x.x.x, 192.168.x.x, 172.16–31.x.x) or unexpected external domains in web server access logs and proxy logs; look for repeated requests with non-standard User-Agent strings or unusual request paths originating from the application server.","tags":["ssrf","privilege-escalation","web","no-user-interaction"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:45:21.958Z"}}