Description
Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-11-10
Score: 10 Critical
EPSS: 1.1% Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 12 Nov 2026 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe adobe Connect
Vendors & Products Adobe
Adobe adobe Connect

Tue, 10 Nov 2026 21:45:00 +0000

Type Values Removed Values Added
Description Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Title Adobe Connect | Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93)
Weaknesses CWE-93
References
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N'}

Subscriptions

Adobe Adobe Connect
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-11-11T10:42:12.560Z

Reserved: 2026-11-03T11:25:17.355Z

Link: CVE-2026-121353

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-10T22:18:25.217

Modified: 2026-11-12T16:56:37.803

Link: CVE-2026-121353

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-12T15:45:04Z

Weaknesses