Cross-Site Scripting Vulnerability in Adobe Connect

CVE-2026-34617

What is CVE-2026-34617?

Adobe Connect versions 2025.3 and 12.10 and earlier are susceptible to a Cross-Site Scripting (XSS) vulnerability that allows low-privileged attackers to inject malicious scripts into web pages. If successfully exploited, this vulnerability could lead to privilege escalation, enabling attackers to gain elevated access to the victim’s account or session. Exploitation necessitates user interaction, as victims must navigate to a specially crafted URL or engage with a compromised webpage, changing the scope of the security risk.

References