{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-121356", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "state": "PUBLISHED", "assignerShortName": "adobe", "dateReserved": "2026-11-03T11:25:17.355Z", "datePublished": "2026-11-10T21:30:47.754Z", "dateUpdated": "2026-11-10T21:30:47.754Z" }, "containers": { "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Adobe Connect", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "12.8", "status": "affected", "version": "0", "versionType": "custom" }, { "status": "unaffected", "version": "12.8.a", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "Adobe Connect", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "12.9", "status": "affected", "version": "0", "versionType": "custom" }, { "status": "unaffected", "version": "12.9.a", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "Adobe Connect", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "12.10", "status": "affected", "version": "0", "versionType": "custom" }, { "status": "unaffected", "version": "12.10.f", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "Adobe Connect", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "12.11", "status": "affected", "version": "0", "versionType": "custom" }, { "status": "unaffected", "version": "12.11.i", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "Adobe Connect", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "12.12", "status": "affected", "version": "0", "versionType": "custom" }, { "status": "unaffected", "version": "12.12.a", "versionType": "custom" } ] } ], "datePublic": "2026-11-10T17:00:00.000Z", "descriptions": [ { "lang": "en", "value": "Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "environmentalScore": 10, "environmentalSeverity": "CRITICAL", "exploitCodeMaturity": "NOT_DEFINED", "integrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "LOW", "modifiedAttackVector": "NETWORK", "modifiedAvailabilityImpact": "NONE", "modifiedConfidentialityImpact": "HIGH", "modifiedIntegrityImpact": "HIGH", "modifiedPrivilegesRequired": "NONE", "modifiedScope": "CHANGED", "modifiedUserInteraction": "NONE", "privilegesRequired": "NONE", "remediationLevel": "NOT_DEFINED", "reportConfidence": "NOT_DEFINED", "scope": "CHANGED", "temporalScore": 10, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-918", "description": "Server-Side Request Forgery (SSRF) (CWE-918)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2026-11-10T21:30:47.754Z" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://www.adobe.com/trust/security/products/connect/apsb26-191.html" } ], "source": { "discovery": "EXTERNAL" }, "title": "Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)", "x_generator": { "engine": "cvelib 1.8.0" } } } }