DeutschShown in its original language — a full translation is planned for a future version.
Adobe Connect: Mehrere Schwachstellen
view advisory published 2026-09-22
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Adobe Connect ausnutzen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen und um Sicherheitsvorkehrungen zu umgehen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-83964US | high7.5 | — | ||
Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to di… | ||||
| CVE-2026-75698US | critical9.3 | — | ||
Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potenti… | ||||
| CVE-2026-75697US | critical9.3 | — | ||
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Maliciou… | ||||
| CVE-2026-75689US | critical9.3 | — | ||
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Maliciou… | ||||
| CVE-2026-75686US | critical9.3 | — | ||
Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit… | ||||
| CVE-2026-75684US | critical9.3 | — | ||
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Maliciou… | ||||
| CVE-2026-75682US | critical9.9 | — | ||
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in… | ||||
| CVE-2026-48361US | medium6.1 | — | ||
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Maliciou… | ||||
| CVE-2026-34689US | high8.6 | — | ||
Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attac… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan