Technology · Adobe
Adobe Connect vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 41 vulnerabilities in Adobe Connect: 24 in the last 7 days and 33 in the last 90 days, 28 of them critical and 0 exploited in the wild. The most recent, CVE-2026-122102, was published on 10 November 2026. Nothing in the last four weeks, down from 9 vulnerabilities in the four before. 0 critical against 6.
- Last 7 days
- 24
- Last 90 days
- 33
- Critical, all time
- 28
- Exploited in the wild
- 0
About Adobe Connect
Adobe Connect is a web conferencing and collaboration platform.
Latest Adobe Connect vulnerabilities
- CVE-2026-122102: Adobe Connect stored cross-site scripting in form fieldshighCVSS 8.7
- CVE-2026-121913: Adobe Connect incorrect authorization privilege escalationhighCVSS 8.8
- CVE-2026-121912: Adobe Connect cross-site scripting in form fieldsmediumCVSS 5.4
- CVE-2026-121910: Adobe Connect multiple critical vulnerabilitiesmediumCVSS 5.4
- CVE-2026-121908: Adobe Connect SQL injectioncriticalCVSS 9.9
- CVE-2026-121906: Adobe Connect path traversal vulnerabilitycriticalCVSS 9.9
- CVE-2026-121904: Adobe Connect stored cross-site scripting vulnerabilitycriticalCVSS 9.6
- CVE-2026-121902: Adobe Connect SQL injection in authenticationcriticalCVSS 9.4
- CVE-2026-121900: Adobe Connect SQL injection vulnerabilityhighCVSS 8.3
- CVE-2026-121898: Adobe Connect SQL injection in arbitrary code executioncriticalCVSS 9.9
- CVE-2026-121896: Adobe Connect SQL injection in database accesscriticalCVSS 9.9
- CVE-2026-121894: Adobe Connect SQL injectioncriticalCVSS 9.9
- CVE-2026-121892: Adobe Connect code injection vulnerabilitycriticalCVSS 9.9
- CVE-2026-121890: Adobe Connect XXE vulnerability leading to arbitrary file readhighCVSS 7.7
- CVE-2026-121889: Adobe Connect server-side request forgery privilege escalationcriticalCVSS 10
- CVE-2026-121887: Adobe Connect XXE vulnerabilitycriticalCVSS 9.9
- CVE-2026-121356: Adobe Connect multiple critical vulnerabilitiescriticalCVSS 10
- CVE-2026-121355: Adobe Connect incorrect authorization privilege escalationcriticalCVSS 9.1
- CVE-2026-121354: Adobe Connect path traversal in file handlingcriticalCVSS 9.9
- CVE-2026-121353: Adobe Connect CRLF injectioncriticalCVSS 10
- CVE-2026-121352: Adobe Connect incorrect authorization privilege escalationcriticalCVSS 10
- CVE-2026-121351: Adobe Connect path traversal allows arbitrary file readcriticalCVSS 10
- CVE-2026-121350: Adobe Connect SQL injection in multiple componentshighCVSS 7.7
- CVE-2026-121349: Adobe Connect path traversal privilege escalationcriticalCVSS 9.6
- CVE-2026-83964: Adobe Connect improper certificate validationmediumCVSS 6.2EPSS 0.1%
Most severe Adobe Connect vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-121889: Adobe Connect server-side request forgery privilege escalationcriticalCVSS 10
- CVE-2026-121356: Adobe Connect multiple critical vulnerabilitiescriticalCVSS 10
- CVE-2026-121353: Adobe Connect CRLF injectioncriticalCVSS 10
- CVE-2026-121352: Adobe Connect incorrect authorization privilege escalationcriticalCVSS 10
- CVE-2026-121351: Adobe Connect path traversal allows arbitrary file readcriticalCVSS 10
- CVE-2026-75682: Adobe Connect SQL injection leading to arbitrary code executioncriticalCVSS 9.9EPSS 0.5%
- CVE-2026-121908: Adobe Connect SQL injectioncriticalCVSS 9.9
- CVE-2026-121906: Adobe Connect path traversal vulnerabilitycriticalCVSS 9.9
- CVE-2026-121898: Adobe Connect SQL injection in arbitrary code executioncriticalCVSS 9.9
- CVE-2026-121896: Adobe Connect SQL injection in database accesscriticalCVSS 9.9
Vulnerabilities per week
Nothing in the last four weeks, down from 9 vulnerabilities in the four before. 0 critical against 6. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 9 | 6 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 24 | 17 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Adobe Connect vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/adobe-connect)<a href="https://junglewise.ai/threats/technologies/adobe-connect"><img src="https://junglewise.ai/threats/technologies/adobe-connect/badge.svg" alt="Adobe Connect vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/adobe-connect.json, and this page as text at https://junglewise.ai/threats/technologies/adobe-connect.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Adobe Connect vulnerabilities", https://junglewise.ai/threats/technologies/adobe-connect, 11 November 2026.