{"id":"CVE-2026-121889","kind":"vulnerability","aliases":["CVE-2026-121889"],"related":[],"title":"Adobe Connect: server-side request forgery lets attackers escalate privileges","description":"Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","summary":"Adobe Connect has a server-side request forgery flaw that lets an attacker make the server send requests on their behalf. The description says this can lead to privilege escalation and needs no user interaction.","severity":"critical","cvss":10.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Connect","fixed":["12.12.a","12.11.i","12.10.f","12.9.a","12.8.a"],"affected":"<= 12.12 (Windows)","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-connect","self-hosted","vendor","windows"],"not_affected_if":[],"how_to_check":"Check your Adobe Connect version in the Connect admin console/about page. Exposed if it is 12.12 or earlier on Windows and not yet on 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a.","fix":"Update Adobe Connect (Windows, on-prem) to the patched build for your branch: 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a (Adobe APSB26-191).","status":"open","published_at":"2026-11-10T22:18:26+00:00","first_seen_at":"2026-11-10T22:27:27+00:00","triaged_at":"2026-11-10T22:28:27+00:00","updated_at":"2026-11-10T22:33:34+00:00","category":"vendor","confidence":0.85,"triage":{"at":"2026-11-10T22:28:27Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Adobe Connect: server-side request forgery lets attackers escalate privileges","impact":"high","summary":"Adobe Connect has a server-side request forgery flaw that lets an attacker make the server send requests on their behalf. The description says this can lead to privilege escalation and needs no user interaction.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["adobe-connect","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker escalates privileges through server-side requests","analyst_note":"Find the affected Adobe Connect versions and fixed release in Adobe's security bulletin; NVD entry lacks version ranges.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000637,"input_tokens":4527,"output_tokens":369,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the affected Adobe Connect versions and fixed release in Adobe's security bulletin; NVD entry lacks version ranges.","search":"'-121889':14A,17A '-2026':13A,16A 'adob':1A,21B,28B,64C 'adobe':18A 'adobe-connect':20B 'affect':67C 'attack':9A,41B 'behalf':49B 'chang':94C 'connect':2A,19A,22B,29B,65C 'could':78C 'cve':12A,15A 'descript':51B 'escal':10A,58B,82C 'exploit':83C 'flaw':37B 'forgeri':7A,36B,74C 'host':25B 'interact':63B,91C 'issu':86C 'lead':55B 'let':8A,39B 'make':42B 'need':60B 'privileg':11A,57B,81C 'request':6A,35B,46B,73C 'requir':89C 'result':79C 'say':52B 'scope':92C 'self':24B 'self-host':23B 'send':45B 'server':4A,33B,44B,71C 'server-sid':3A,32B,70C 'side':5A,34B,72C 'ssrf':75C 'user':62B,90C 'vendor':26B 'vulner':76C 'window':27B","nicknames":[],"mitigations":[],"who_affected":"Self-hosted Adobe Connect servers on Windows running 12.12 or earlier that are not on a patched build are affected. Adobe rates it critical (CVSS 10.0): network-reachable, no authentication, no user interaction. Adobe says it is not aware of exploitation. Teams that do not run Connect on their own Windows servers can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:33:34Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":2995},"products":{"at":"2026-11-10T22:33:34Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":2995},"how_to_check":{"at":"2026-11-10T22:33:34Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":2995},"who_affected":{"at":"2026-11-10T22:33:34Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":2995}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobeconnect","connect"],"ptokens":["adobe","connect"],"labels":["adobeconnect","critical","selfhosted","vendor","windows"],"campaign_type":null,"search_a":"'-121889':14A,17A '-2026':13A,16A 'adob':1A 'adobe':18A 'attack':9A 'connect':2A,19A 'cve':12A,15A 'escal':10A 'forgeri':7A 'let':8A 'privileg':11A 'request':6A 'server':4A 'server-sid':3A 'side':5A","search_b":"'adob':21B,28B 'adobe-connect':20B 'attack':41B 'behalf':49B 'connect':22B,29B 'descript':51B 'escal':58B 'flaw':37B 'forgeri':36B 'host':25B 'interact':63B 'lead':55B 'let':39B 'make':42B 'need':60B 'privileg':57B 'request':35B,46B 'say':52B 'self':24B 'self-host':23B 'send':45B 'server':33B,44B 'server-sid':32B 'side':34B 'user':62B 'vendor':26B 'window':27B","search_c":"'adob':64C 'affect':67C 'chang':94C 'connect':65C 'could':78C 'escal':82C 'exploit':83C 'forgeri':74C 'interact':91C 'issu':86C 'privileg':81C 'request':73C 'requir':89C 'result':79C 'scope':92C 'server':71C 'server-sid':70C 'side':72C 'ssrf':75C 'user':90C 'vulner':76C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:18:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121889","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121889","severity":null,"published_at":"2026-11-10T22:18:26+00:00","modified_at":"2026-11-10T22:18:26+00:00","first_seen_at":"2026-11-10T22:27:27+00:00","fetched_at":"2026-11-10T22:27:27+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121889:2995","url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","severity":null,"published_at":"2026-11-10T22:33:34+00:00","modified_at":"2026-11-10T22:33:34+00:00","first_seen_at":"2026-11-10T22:33:34+00:00","fetched_at":"2026-11-10T22:33:34+00:00","note":"Read Adobe APSB26-191 (Nov 10 2026): lists this CVE as SSRF, CVSS 10.0, affects Connect 12.12 and earlier on Windows; fixed in 12.12.a/12.11.i/12.10.f/12.9.a/12.8.a. No exploitation known per Adobe. No community posts searched (fresh disclosure).","cites":["https://www.adobe.com/trust/security/products/connect/apsb26-191.html"]}],"documents":[{"id":119650,"url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","title":"APSB26-191 Security update available for Adobe Connect","kind":"advisory","source":"analyst","publisher":null,"text":"Adobe priority 2 update, Nov 10 2026. Affected: Adobe Connect 12.12 and earlier, Windows. Updated versions: 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a. CVE-2026-121354: Path Traversal CWE-22, impact listed by Adobe: arbitrary code execution, critical, CVSS 9.9 AV:N/AC:L/PR:L/UI:N/S:C. Credit: edra. Adobe not aware of exploits in the wild.","published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}