{"id":"CVE-2026-121351","kind":"vulnerability","aliases":["CVE-2026-121351"],"related":[],"title":"Adobe Connect on Windows: unauthenticated path traversal, CVSS 10.0 (fixed in APSB26-191)","description":"Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.","summary":"Adobe's bulletin APSB26-191 (Nov 10, 2026) lists CVE-2026-121351 as a critical path traversal (CWE-22), CVSS 10.0, network-reachable with no privileges and no user interaction (AV:N/PR:N/UI:N, scope changed, high confidentiality and integrity impact). Adobe labels the impact 'privilege escalation'. Adobe is not aware of exploits in the wild.","severity":"critical","cvss":10.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Connect","fixed":["12.12.a","12.11.i","12.10.f","12.9.a","12.8.a"],"affected":"<= 12.12 (Windows)","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-connect","no-auth","self-hosted","vendor","windows"],"not_affected_if":["managed-hosting"],"how_to_check":"Self-hosted Adobe Connect on Windows: check the installed version. Affected: 12.12 and earlier. Fixed builds: 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a. If your server is on an earlier build than the one for your release line, you are exposed. The bulletin lists Windows only; also check if you run Connect on another platform, which the bulletin does not cover.","fix":"Install the APSB26-191 update for your release line: 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a (Windows).","status":"open","published_at":"2026-11-10T22:18:24+00:00","first_seen_at":"2026-11-10T22:27:26+00:00","triaged_at":"2026-11-10T22:28:30+00:00","updated_at":"2026-11-10T22:34:47+00:00","category":"vendor","confidence":0.8,"triage":{"at":"2026-11-10T22:28:30Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Adobe Connect: path traversal lets attackers read arbitrary server files","impact":"high","summary":"Adobe Connect has a path traversal flaw that lets an attacker read files and directories outside the intended scope. No user interaction is needed, and the CVSS score is 10.0.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["adobe-connect","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker reads sensitive server files outside intended directories","analyst_note":"Find affected Adobe Connect versions and the Adobe security bulletin with fixed versions and whether authentication is required; check NVD entry https://nvd.nist.gov/vuln/detail/CVE-2026-121351.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations that run Adobe Connect servers are the ones exposed, since the flaw is in the server-side file handling. The sources do not name affected versions or configurations, so unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000677,"input_tokens":4579,"output_tokens":439,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find affected Adobe Connect versions and the Adobe security bulletin with fixed versions and whether authentication is required; check NVD entry https://nvd.nist.gov/vuln/detail/CVE-2026-121351.","search":"'-121351':16A,19A,44B '-191':13A,37B '-2026':15A,18A,43B '-22':51B '10':39B '10.0':9A,53B '2026':40B 'access':123C,131C 'adob':1A,23B,33B,75B,81B,90C 'adobe':20A 'adobe-connect':22B 'affect':93C 'apsb26':12A,36B 'arbitrari':112C 'attack':117C 'auth':27B 'av':64B 'awar':84B 'bulletin':35B 'chang':69B,144C 'confidenti':71B 'connect':2A,21A,24B,91C 'could':109C,118C 'critic':47B 'cve':14A,17A,42B 'cvss':8A,52B 'cwe':50B 'directori':104C,127C 'escal':80B 'exploit':86B,119C,133C 'file':113C,125C 'fix':10A 'high':70B 'host':30B 'impact':74B,78B 'improp':96C 'integr':73B 'intend':130C 'interact':63B,141C 'issu':136C 'label':76B 'lead':110C 'limit':97C 'list':41B 'n':67B 'n/pr':65B 'n/ui':66B 'network':55B 'network-reach':54B 'no-auth':25B 'nov':38B 'outsid':128C 'path':6A,48B,105C 'pathnam':100C 'privileg':59B,79B 'reachabl':56B 'read':115C 'requir':139C 'restrict':103C 'scope':68B,132C,142C 'self':29B 'self-host':28B 'sensit':124C 'system':114C 'travers':7A,49B,106C 'unauthent':5A 'user':62B,140C 'vendor':31B 'vulner':107C,121C 'wild':89B 'window':4A,32B","nicknames":[],"mitigations":[],"who_affected":"Organizations that run Adobe Connect servers are the ones exposed, since the flaw is in the server-side file handling. The sources do not name affected versions or configurations, so unknown.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:34:47Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":3002},"products":{"at":"2026-11-10T22:34:47Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":3002},"how_to_check":{"at":"2026-11-10T22:34:47Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":3002},"who_affected":{"at":"2026-11-10T22:34:47Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":3002}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobeconnect","connect"],"ptokens":["adobe","connect"],"labels":["adobeconnect","critical","noauth","selfhosted","vendor","windows"],"campaign_type":null,"search_a":"'-121351':16A,19A '-191':13A '-2026':15A,18A '10.0':9A 'adob':1A 'adobe':20A 'apsb26':12A 'connect':2A,21A 'cve':14A,17A 'cvss':8A 'fix':10A 'path':6A 'travers':7A 'unauthent':5A 'window':4A","search_b":"'-121351':44B '-191':37B '-2026':43B '-22':51B '10':39B '10.0':53B '2026':40B 'adob':23B,33B,75B,81B 'adobe-connect':22B 'apsb26':36B 'auth':27B 'av':64B 'awar':84B 'bulletin':35B 'chang':69B 'confidenti':71B 'connect':24B 'critic':47B 'cve':42B 'cvss':52B 'cwe':50B 'escal':80B 'exploit':86B 'high':70B 'host':30B 'impact':74B,78B 'integr':73B 'interact':63B 'label':76B 'list':41B 'n':67B 'n/pr':65B 'n/ui':66B 'network':55B 'network-reach':54B 'no-auth':25B 'nov':38B 'path':48B 'privileg':59B,79B 'reachabl':56B 'scope':68B 'self':29B 'self-host':28B 'travers':49B 'user':62B 'vendor':31B 'wild':89B 'window':32B","search_c":"'access':123C,131C 'adob':90C 'affect':93C 'arbitrari':112C 'attack':117C 'chang':144C 'connect':91C 'could':109C,118C 'directori':104C,127C 'exploit':119C,133C 'file':113C,125C 'improp':96C 'intend':130C 'interact':141C 'issu':136C 'lead':110C 'limit':97C 'outsid':128C 'path':105C 'pathnam':100C 'read':115C 'requir':139C 'restrict':103C 'scope':132C,142C 'sensit':124C 'system':114C 'travers':106C 'user':140C 'vulner':107C,121C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:18:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121351","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121351","severity":null,"published_at":"2026-11-10T22:18:24+00:00","modified_at":"2026-11-10T22:18:24+00:00","first_seen_at":"2026-11-10T22:27:26+00:00","fetched_at":"2026-11-10T22:27:26+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121351:3002","url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","severity":null,"published_at":"2026-11-10T22:34:47+00:00","modified_at":"2026-11-10T22:34:47+00:00","first_seen_at":"2026-11-10T22:34:47+00:00","fetched_at":"2026-11-10T22:34:47+00:00","note":"Read Adobe APSB26-191: affected 12.12 and earlier on Windows, fixed builds listed, PR:N so no auth; no exploitation known per Adobe. Title changed from file-read to match Adobe's labeling. Sibling CVEs share this bulletin.","cites":["https://www.adobe.com/trust/security/products/connect/apsb26-191.html"]}],"documents":[{"id":119650,"url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","title":"APSB26-191 Security update available for Adobe Connect","kind":"advisory","source":"analyst","publisher":null,"text":"Adobe priority 2 update, Nov 10 2026. Affected: Adobe Connect 12.12 and earlier, Windows. Updated versions: 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a. CVE-2026-121354: Path Traversal CWE-22, impact listed by Adobe: arbitrary code execution, critical, CVSS 9.9 AV:N/AC:L/PR:L/UI:N/S:C. Credit: edra. Adobe not aware of exploits in the wild.","published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}