Search/CVE-2026-75686
● CVE — Critical

CVE-2026-75686

VendoradobeProductconnect, connect for mobileDiscoveredSep 22, 2026UpdatedSep 25, 2026

Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

CVSS v3.1
9.3 CRITICAL
EPSS
0.92%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
3
sources referencing this CVE
Related IOCs
seen in the same coverage
EPSS Trend
Sep 24, 2026 → Oct 26, 2026
▼ 0.77pp
1.70% → 0.92% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityNONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Connections
7 relationships
Timeline
disclosure → media coverage
Sep 22, 2026
Disclosure — published as a CVE record.
Sep 23, 2026
securityweek.com reports: Adobe Patches Critical Flaws in Connect, AEM Forms
Sep 23, 2026
advisories.ncsc.nl reports: NCSC-2026-0391 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Connect en Adobe Connect Android Mobile App
Sep 28, 2026
thehackernews.com reports: ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats