CVE-2026-121890
7.7 HIGHPublished 2026-11-10 · Updated 2026-11-10
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Adobe Connect is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. A low-privileged attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-611
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-10025
- MEDIUMCVE-2026-101893
- HIGHCVE-2026-102127PoC
- HIGHCVE-2026-102155
- HIGHCVE-2026-104679
- HIGHCVE-2026-106616
- UNSCOREDCVE-2026-108357PoC
- UNSCOREDCVE-2026-108358PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.