CVE-2026-75698: Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker needs to persuade a victim to visit a maliciously crafted URL or interact with a compromised web page. No attacker privileges are required, and the attack can be conducted over the network.
What could exploitation allow an attacker to do?
Successful reflected XSS exploitation can inject malicious scripts into a web page in the victim's browser. This could give the attacker elevated access to or control over the victim's account or session.