CVE-2026-121352

Summary

Adobe Connect contains an Incorrect Authorization (CWE-863) vulnerability allowing unauthenticated or low-privileged attackers to escalate privileges and access sensitive resources due to improper scope enforcement during authorization checks. The flaw is exploitable remotely without user interaction.

Exploitability

Exploitation requires no user interaction and can be performed remotely by an unauthenticated attacker, though successful privilege escalation may depend on specific internal state or request ordering not detailed in the public description.

Blast radius

If exploited, this could allow attackers to gain elevated privileges within Adobe Connect, potentially accessing confidential meeting data, participant information, or administrative functions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Adobe Connect version 2.590 or later, as this is the fixed version published by Adobe for CVE-2026-121352.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.