# CVE-2026-121913: Adobe Connect incorrect authorization privilege escalation

Source: https://junglewise.ai/threats/cve-2026-121913-adobe-connect-is-affected-by-an-incorrect-authorization  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-121913 · Severity: high · CVSS 8.8 · Published 2026-11-10

Adobe Connect, a web conferencing platform used for remote meetings and collaboration, is affected by an incorrect authorization vulnerability (CVE-2026-121913) that allows a low-privileged authenticated attacker to escalate privileges without user interaction. An attacker could exploit this flaw to gain elevated access to sensitive information or administrative functionality within the system. The vendor has released patches and rates this issue as high severity.

Technologies: [Adobe Connect](https://junglewise.ai/threats/technologies/adobe-connect). Vendors: [Adobe](https://junglewise.ai/threats/vendors/adobe).

## Quick answers

**Is CVE-2026-121913 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-121913 being exploited in the wild.

**How severe is CVE-2026-121913?** High severity, with a CVSS score of 8.8, published 10 November 2026.

**Which products and versions are affected?** Adobe Connect 12.12 and earlier.

**Is there a fix for CVE-2026-121913?** Yes: fixed in Connect 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-121913 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-121913?** Check whether you run Adobe Connect at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Connect 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a

## Technical details

CVE-2026-121913 is an incorrect authorization flaw (CWE-863) in Adobe Connect that permits privilege escalation. The vulnerability requires network access and low-privilege authentication but no user interaction; a low-privileged user can bypass authorization checks to access higher-privilege functionality or data. A fix is available in updated versions of Adobe Connect.

## Affected products

- Adobe Connect 12.12 and earlier

## Timeline

- 2026-11-10: disclosed

## References

- [https://www.adobe.com/trust/security/products/connect/apsb26-191.html](https://www.adobe.com/trust/security/products/connect/apsb26-191.html)

## Related threats

- [Adobe Connect stored cross-site scripting in form fields](https://junglewise.ai/threats/cve-2026-122102-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss)
- [Adobe Connect cross-site scripting in form fields](https://junglewise.ai/threats/cve-2026-121912-adobe-connect-is-affected-by-a-cross-site-scripting-xss)
- [Adobe Connect multiple critical vulnerabilities](https://junglewise.ai/threats/cve-2026-121910-adobe-connect-is-affected-by-a-cross-site-scripting-xss)
- [Adobe Connect SQL injection](https://junglewise.ai/threats/cve-2026-121908-adobe-connect-is-affected-by-an-improper-neutralization-of)
- [Adobe Connect path traversal vulnerability](https://junglewise.ai/threats/cve-2026-121906-adobe-connect-is-affected-by-an-improper-limitation-of-a)