PT-2026-40341 · Adobe · Connect

Published 2026-05-12 · Updated 2026-05-29 · CVE-2026-34659

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 2025.9.15 and earlier Adobe Connect versions 2025.8.157 and earlier

Description Deserialization of Untrusted Data occurs when an application processes data from an untrusted source without sufficient validation, potentially allowing an attacker to execute arbitrary code in the context of the current user. Exploitation requires user interaction, such as visiting a maliciously crafted URL or interacting with a compromised web page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2026-06876

CVE-2026-34659

Affected Products

Connect

References · 9

• https://helpx.adobe.com/security/products/connect/apsb26-50.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34659 · Security Note
• https://bdu.fstec.ru/vul/2026-06876 · Security Note
• https://twitter.com/lyrie_ai/status/2056122905751425430 · Twitter Post
• https://twitter.com/ElusivePrivacy/status/2054348061854548109 · Twitter Post
• https://twitter.com/CVEnew/status/2054340956044845340 · Twitter Post
• https://twitter.com/KaitanSecurity/status/2054282973919244576 · Twitter Post
• https://twitter.com/integ_sec/status/2060334094622364126 · Twitter Post
• https://twitter.com/securitydailyr/status/2054750542271017125 · Twitter Post