CVE-2026-121904

Summary

A stored XSS vulnerability in Adobe Connect allows low-privileged attackers to inject malicious scripts into form fields, which execute in victims' browsers when they view the compromised page, enabling session hijacking or account takeover with elevated scope.

Exploitability

Exploitation requires only low-privileged access and no user interaction beyond visiting a maliciously crafted page; the attack is straightforward for authenticated attackers.

Blast radius

Successful exploitation could lead to full compromise of victim accounts, including unauthorized data access, privilege escalation within the application, or lateral movement via compromised sessions.

Detection

Defenders should monitor for anomalous script injection attempts in form submission logs (e.g., unexpected <script>, onerror, or javascript: URIs in user-provided fields) and inspect server-side logs for requests containing unsanitized XSS payloads to endpoints handling content creation or profile updates.

Prioritized remediation

Upgrade to Adobe Connect version 2.590 or later, as this is the first version that addresses CVE-2026-121904.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.