CVE-2026-121898

Summary

Adobe Connect contains an SQL injection vulnerability (CWE-89) due to improper neutralization of special SQL elements in user-supplied input. A low-privileged attacker can exploit this without user interaction to execute arbitrary code in the context of the current user, with scope changed from original to new context.

Exploitability

Exploitation is straightforward for a low-privileged authenticated attacker due to low attack complexity and no user interaction required.

Blast radius

Successful exploitation could lead to full compromise of the application server, including unauthorized access to sensitive data, modification of system behavior, and potential lateral movement within the infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Adobe Connect to version 2.590 or later, as this is the fixed version addressing CVE-2026-121898.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.