{"id":"CVE-2026-121354","kind":"vulnerability","aliases":["CVE-2026-121354"],"related":[],"title":"Adobe Connect 12.12 and earlier on Windows: path traversal (CVE-2026-121354), fixed in APSB26-191","description":"Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.","summary":"Adobe fixed a critical path traversal (CWE-22, CVSS 9.9) in Adobe Connect on Windows in bulletin APSB26-191 (Nov 10 2026). It needs a low-privileged account and no user interaction. NVD describes arbitrary file system read; Adobe's bulletin lists the impact as arbitrary code execution. Adobe is not aware of exploitation.","severity":"critical","cvss":9.9,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Connect","fixed":["12.12.a","12.11.i","12.10.f","12.9.a","12.8.a"],"affected":"<= 12.12 (Windows)","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-connect","on-premise","path-traversal","self-hosted","vendor","windows"],"not_affected_if":["managed-hosting"],"how_to_check":"Check your Adobe Connect on-premise server version. If it is 12.12 or earlier on Windows and not at 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a (or later), you are exposed. Also check if you run Connect on other platforms: the bulletin lists only Windows.","fix":"Install the Adobe Connect patch from the on-premise patch page: 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a, matching your release line (Windows).","status":"open","published_at":"2026-11-10T22:18:25+00:00","first_seen_at":"2026-11-10T22:27:26+00:00","triaged_at":"2026-11-10T22:28:37+00:00","updated_at":"2026-11-10T22:34:48+00:00","category":"vendor","confidence":0.85,"triage":{"at":"2026-11-10T22:28:37Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Adobe Connect: path traversal lets attackers read arbitrary server files","impact":"high","summary":"Adobe Connect has a path traversal flaw that lets an attacker reach files and directories outside the intended scope. The sources say an attacker can read sensitive files without any user interaction.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["adobe-connect"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Arbitrary server files readable, including sensitive configuration and credentials","analyst_note":"Check the Adobe security bulletin for affected versions, fixed versions, and whether a patch or setting exists; the NVD entry alone gives no product range.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations that run Adobe Connect on their own infrastructure are the ones exposed. The sources do not state which Adobe Connect versions or deployment modes are affected, so the team should confirm the product range with Adobe before assuming exposure. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000677,"input_tokens":4579,"output_tokens":438,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Check the Adobe security bulletin for affected versions, fixed versions, and whether a patch or setting exists; the NVD entry alone gives no product range.","search":"'-121354':12A,19A,22A '-191':16A,57B '-2026':11A,18A,21A '-22':46B '10':59B '12.12':3A '2026':60B '9.9':48B 'access':127C,135C 'account':67B 'adob':1A,26B,39B,50B,78B,88B,94C 'adobe':23A 'adobe-connect':25B 'affect':97C 'apsb26':15A,56B 'arbitrari':74B,85B,116C 'attack':121C 'awar':91B 'bulletin':55B,80B 'chang':148C 'code':86B 'connect':2A,24A,27B,51B,95C 'could':113C,122C 'critic':42B 'cve':10A,17A,20A 'cvss':47B 'cwe':45B 'describ':73B 'directori':108C,131C 'earlier':5A 'execut':87B 'exploit':93B,123C,137C 'file':75B,117C,129C 'fix':13A,40B 'host':36B 'impact':83B 'improp':100C 'intend':134C 'interact':71B,145C 'issu':140C 'lead':114C 'limit':101C 'list':81B 'low':65B 'low-privileg':64B 'need':62B 'nov':58B 'nvd':72B 'on-premis':28B 'outsid':132C 'path':8A,32B,43B,109C 'path-travers':31B 'pathnam':104C 'premis':30B 'privileg':66B 'read':77B,119C 'requir':143C 'restrict':107C 'scope':136C,146C 'self':35B 'self-host':34B 'sensit':128C 'system':76B,118C 'travers':9A,33B,44B,110C 'user':70B,144C 'vendor':37B 'vulner':111C,125C 'window':7A,38B,53B","nicknames":[],"mitigations":[],"who_affected":"Organizations that run Adobe Connect on their own infrastructure are the ones exposed. The sources do not state which Adobe Connect versions or deployment modes are affected, so the team should confirm the product range with Adobe before assuming exposure. unknown","tier":"B","verified":{"fix":{"at":"2026-11-10T22:34:48Z","by":"analyst","doc":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","run_id":2999},"products":{"at":"2026-11-10T22:34:48Z","by":"analyst","doc":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","run_id":2999},"who_affected":{"at":"2026-11-10T22:34:48Z","by":"analyst","doc":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","run_id":2999}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobeconnect","connect"],"ptokens":["adobe","connect"],"labels":["adobeconnect","critical","onpremise","pathtraversal","selfhosted","vendor","windows"],"campaign_type":null,"search_a":"'-121354':12A,19A,22A '-191':16A '-2026':11A,18A,21A '12.12':3A 'adob':1A 'adobe':23A 'apsb26':15A 'connect':2A,24A 'cve':10A,17A,20A 'earlier':5A 'fix':13A 'path':8A 'travers':9A 'window':7A","search_b":"'-191':57B '-22':46B '10':59B '2026':60B '9.9':48B 'account':67B 'adob':26B,39B,50B,78B,88B 'adobe-connect':25B 'apsb26':56B 'arbitrari':74B,85B 'awar':91B 'bulletin':55B,80B 'code':86B 'connect':27B,51B 'critic':42B 'cvss':47B 'cwe':45B 'describ':73B 'execut':87B 'exploit':93B 'file':75B 'fix':40B 'host':36B 'impact':83B 'interact':71B 'list':81B 'low':65B 'low-privileg':64B 'need':62B 'nov':58B 'nvd':72B 'on-premis':28B 'path':32B,43B 'path-travers':31B 'premis':30B 'privileg':66B 'read':77B 'self':35B 'self-host':34B 'system':76B 'travers':33B,44B 'user':70B 'vendor':37B 'window':38B,53B","search_c":"'access':127C,135C 'adob':94C 'affect':97C 'arbitrari':116C 'attack':121C 'chang':148C 'connect':95C 'could':113C,122C 'directori':108C,131C 'exploit':123C,137C 'file':117C,129C 'improp':100C 'intend':134C 'interact':145C 'issu':140C 'lead':114C 'limit':101C 'outsid':132C 'path':109C 'pathnam':104C 'read':119C 'requir':143C 'restrict':107C 'scope':136C,146C 'sensit':128C 'system':118C 'travers':110C 'user':144C 'vulner':111C,125C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:18:25+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121354","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121354","severity":null,"published_at":"2026-11-10T22:18:25+00:00","modified_at":"2026-11-10T22:18:25+00:00","first_seen_at":"2026-11-10T22:27:26+00:00","fetched_at":"2026-11-10T22:27:26+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121354:2999","url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","severity":null,"published_at":"2026-11-10T22:34:48+00:00","modified_at":"2026-11-10T22:34:48+00:00","first_seen_at":"2026-11-10T22:34:48+00:00","fetched_at":"2026-11-10T22:34:48+00:00","note":"Read Adobe APSB26-191 (primary). Affected 12.12 and earlier Windows; fixed 12.12.a/12.11.i/12.10.f/12.9.a/12.8.a. Adobe lists impact as code execution vs NVD file read. No exploitation known. Hosted-service patching status not stated in the bulletin; not verified. No social search done.","cites":["https://www.adobe.com/trust/security/products/connect/apsb26-191.html","https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html"]}],"documents":[{"id":119650,"url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","title":"APSB26-191 Security update available for Adobe Connect","kind":"advisory","source":"analyst","publisher":null,"text":"Adobe priority 2 update, Nov 10 2026. Affected: Adobe Connect 12.12 and earlier, Windows. Updated versions: 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a. CVE-2026-121354: Path Traversal CWE-22, impact listed by Adobe: arbitrary code execution, critical, CVSS 9.9 AV:N/AC:L/PR:L/UI:N/S:C. Credit: edra. Adobe not aware of exploits in the wild.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":119653,"url":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","title":"Find on-premise patch files for Adobe Connect 9-12","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}