Vulnerability in Adobe Connect Desktop App

[ Why it matters ]Priority signals

• Critical severity: CVSS 9.6

[ Description ]Official description

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund27 Oct 2026WID-SEC-2026-4203

  Adobe Connect: Vulnerability allows code execution Translated from German

  CVE-2026-48360

[ References ]References

• www.adobe.com/trust/security/products/connect/apsb26-182.html