PT-2026-40342 · Adobe · Connect

Published 2026-05-12 · Updated 2026-05-31 · CVE-2026-34660

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 2025.9.15 and 2025.8.157 and earlier

Description An Incorrect Authorization issue exists that could lead to arbitrary code execution in the context of the current user. An attacker can exploit this by injecting malicious scripts into a web page, which may allow them to gain elevated access or control over the victim's account or session. This exploitation requires user interaction, specifically that the victim visits a maliciously crafted URL or interacts with a compromised web page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2026-06877

CVE-2026-34660

Affected Products

Connect

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-34660 · Security Note
• https://helpx.adobe.com/security/products/connect/apsb26-50.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06877 · Security Note
• https://twitter.com/CVEnew/status/2054340957013725346 · Twitter Post
• https://twitter.com/ElusivePrivacy/status/2054348061854548109 · Twitter Post
• https://twitter.com/integ_sec/status/2061058863391035423 · Twitter Post
• https://twitter.com/securitydailyr/status/2054750542271017125 · Twitter Post
• https://twitter.com/KaitanSecurity/status/2054282984455278632 · Twitter Post