CVE-2026-75682

Summary

The flaw is an SQL injection vulnerability in Adobe Connect that allows a low-privileged attacker to execute arbitrary SQL commands, potentially gaining elevated access. This matters because it can lead to arbitrary code execution and unauthorized access to user accounts.

Exploitability

Exploitation is relatively straightforward as it does not require user interaction, but the attacker must have access to the affected endpoint.

Blast radius

If exploited, the impact could be severe, allowing the attacker to gain full control over the victim's account or session, leading to data theft or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Adobe Connect 4.6.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.