{"id":"CVE-2026-121356","kind":"vulnerability","aliases":["CVE-2026-121356"],"related":[],"title":"Adobe Connect: server-side request forgery lets attackers escalate privileges","description":"Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","summary":"Adobe Connect has a server-side request forgery flaw that lets an attacker make the server send requests on their behalf. The sources say this can lead to privilege escalation and needs no user interaction.","severity":"critical","cvss":10.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Connect","fixed":["12.12.a","12.11.i","12.10.f","12.9.a","12.8.a"],"affected":"<= 12.12 (Windows)","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-connect","self-hosted","ssrf","vendor","windows"],"not_affected_if":[],"how_to_check":"Check your Adobe Connect server version in the admin console/about page. If you run Adobe Connect 12.12 or earlier on Windows without the patch levels 12.12.a / 12.11.i / 12.10.f / 12.9.a / 12.8.a, you are exposed.","fix":"Install the Adobe Connect patch for your branch: 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a (Windows, on-prem patch files on Adobe's patch page). Hosted services are upgraded by Adobe.","status":"open","published_at":"2026-11-10T22:18:25+00:00","first_seen_at":"2026-11-10T22:27:26+00:00","triaged_at":"2026-11-10T22:28:27+00:00","updated_at":"2026-11-10T22:33:41+00:00","category":"vendor","confidence":0.85,"triage":{"at":"2026-11-10T22:28:27Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Adobe Connect: server-side request forgery lets attackers escalate privileges","impact":"high","summary":"Adobe Connect has a server-side request forgery flaw that lets an attacker make the server send requests on their behalf. The sources say this can lead to privilege escalation and needs no user interaction.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["adobe-connect","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker escalates privileges through server-side requests","analyst_note":"Find the affected Adobe Connect versions and the Adobe security bulletin for CVE-2026-121356, and whether a fix is available.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations that run Adobe Connect themselves. The sources do not name affected versions or configurations, so whether a given deployment is exposed is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000654,"input_tokens":4527,"output_tokens":402,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the affected Adobe Connect versions and the Adobe security bulletin for CVE-2026-121356, and whether a fix is available.","search":"'-121356':14A,17A '-2026':13A,16A 'adob':1A,21B,29B,65C 'adobe':18A 'adobe-connect':20B 'affect':68C 'attack':9A,42B 'behalf':50B 'chang':95C 'connect':2A,19A,22B,30B,66C 'could':79C 'cve':12A,15A 'escal':10A,59B,83C 'exploit':84C 'flaw':38B 'forgeri':7A,37B,75C 'host':25B 'interact':64B,92C 'issu':87C 'lead':56B 'let':8A,40B 'make':43B 'need':61B 'privileg':11A,58B,82C 'request':6A,36B,47B,74C 'requir':90C 'result':80C 'say':53B 'scope':93C 'self':24B 'self-host':23B 'send':46B 'server':4A,34B,45B,72C 'server-sid':3A,33B,71C 'side':5A,35B,73C 'sourc':52B 'ssrf':26B,76C 'user':63B,91C 'vendor':27B 'vulner':77C 'window':28B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Adobe Connect on-premise on Windows, version 12.12 and earlier. The bulletin describes a network-reachable, no-login, no-interaction SSRF leading to privilege escalation (one of 24 CVEs in the bulletin). Adobe-hosted Connect is upgraded by Adobe; teams not running Connect can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:33:41Z","by":"analyst","doc":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","run_id":2997},"products":{"at":"2026-11-10T22:33:41Z","by":"analyst","doc":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","run_id":2997},"who_affected":{"at":"2026-11-10T22:33:41Z","by":"analyst","doc":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","run_id":2997}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobeconnect","connect"],"ptokens":["adobe","connect"],"labels":["adobeconnect","critical","selfhosted","ssrf","vendor","windows"],"campaign_type":null,"search_a":"'-121356':14A,17A '-2026':13A,16A 'adob':1A 'adobe':18A 'attack':9A 'connect':2A,19A 'cve':12A,15A 'escal':10A 'forgeri':7A 'let':8A 'privileg':11A 'request':6A 'server':4A 'server-sid':3A 'side':5A","search_b":"'adob':21B,29B 'adobe-connect':20B 'attack':42B 'behalf':50B 'connect':22B,30B 'escal':59B 'flaw':38B 'forgeri':37B 'host':25B 'interact':64B 'lead':56B 'let':40B 'make':43B 'need':61B 'privileg':58B 'request':36B,47B 'say':53B 'self':24B 'self-host':23B 'send':46B 'server':34B,45B 'server-sid':33B 'side':35B 'sourc':52B 'ssrf':26B 'user':63B 'vendor':27B 'window':28B","search_c":"'adob':65C 'affect':68C 'chang':95C 'connect':66C 'could':79C 'escal':83C 'exploit':84C 'forgeri':75C 'interact':92C 'issu':87C 'privileg':82C 'request':74C 'requir':90C 'result':80C 'scope':93C 'server':72C 'server-sid':71C 'side':73C 'ssrf':76C 'user':91C 'vulner':77C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:18:25+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121356","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121356","severity":null,"published_at":"2026-11-10T22:18:25+00:00","modified_at":"2026-11-10T22:18:25+00:00","first_seen_at":"2026-11-10T22:27:26+00:00","fetched_at":"2026-11-10T22:27:26+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121356:2997","url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","severity":null,"published_at":"2026-11-10T22:33:41+00:00","modified_at":"2026-11-10T22:33:41+00:00","first_seen_at":"2026-11-10T22:33:41+00:00","fetched_at":"2026-11-10T22:33:41+00:00","note":"Read Adobe APSB26-191 (Nov 10 2026): SSRF CWE-918, CVSS 10.0 unauthenticated; Adobe not aware of exploits. Affected Connect 12.12 and earlier on Windows; fixed in patch builds. Not read: exact install steps.","cites":["https://www.adobe.com/trust/security/products/connect/apsb26-191.html","https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html"]}],"documents":[{"id":119650,"url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","title":"APSB26-191 Security update available for Adobe Connect","kind":"advisory","source":"analyst","publisher":null,"text":"Adobe priority 2 update, Nov 10 2026. Affected: Adobe Connect 12.12 and earlier, Windows. Updated versions: 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a. CVE-2026-121354: Path Traversal CWE-22, impact listed by Adobe: arbitrary code execution, critical, CVSS 9.9 AV:N/AC:L/PR:L/UI:N/S:C. Credit: edra. Adobe not aware of exploits in the wild.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":119653,"url":"https://helpx.adobe.com/adobe-connect/kb/connect-on-prem-patches.html","title":"Find on-premise patch files for Adobe Connect 9-12","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}