PT-2026-32890 · Adobe · Connect

Published 2026-04-14 · Updated 2026-04-15 · CVE-2026-34617

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 2025.3 and 12.10 and earlier

Description A Cross-Site Scripting (XSS) issue allows a low-privileged attacker to inject malicious scripts into a web page. This could lead to privilege escalation, potentially granting the attacker elevated access or control over a victim's account or session. Successful exploitation requires user interaction, such as visiting a maliciously crafted URL or interacting with a compromised web page.

Recommendations Update Adobe Connect to a version later than 2025.3 and 12.10.

Fix

LPE

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2026-05600

CVE-2026-34617

Affected Products

Connect

References · 4

• https://helpx.adobe.com/security/products/connect/apsb26-37.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05600 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34617 · Security Note
• https://twitter.com/CVEnew/status/2044358542451171374 · Twitter Post