{"id":"CVE-2026-121894","kind":"vulnerability","aliases":["CVE-2026-121894"],"related":[],"title":"Adobe Connect on Windows: SQL injection by a logged-in user can lead to code execution (fixed in APSB26-191)","description":"Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","summary":"Adobe's APSB26-191 (Nov 10, 2026) fixes a critical SQL injection (CWE-89) in Adobe Connect, CVE-2026-121894, CVSS 9.9. Adobe's vector is network, low privileges, no user interaction, scope changed; impact is rated arbitrary code execution. Adobe says it is not aware of exploits in the wild.","severity":"critical","cvss":9.9,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Connect","fixed":["12.12.a","12.11.i","12.10.f","12.9.a","12.8.a"],"affected":"<= 12.12 (Windows)","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-connect","self-hosted","sql-injection","vendor","windows"],"not_affected_if":["managed-hosting"],"how_to_check":"Check your self-hosted Adobe Connect server version (Windows). Affected per Adobe: 12.12 and earlier. Fixed builds: 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a. If your branch is below the fixed build for it, you are exposed. Also check if you run Connect on another platform: Adobe's bulletin lists Windows only.","fix":"Install the Adobe Connect update for your branch: 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a (Windows), per APSB26-191.","status":"open","published_at":"2026-11-10T22:18:26+00:00","first_seen_at":"2026-11-10T22:27:27+00:00","triaged_at":"2026-11-10T22:28:34+00:00","updated_at":"2026-11-10T22:32:32+00:00","category":"vendor","confidence":0.85,"triage":{"at":"2026-11-10T22:28:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Adobe Connect: SQL injection lets a low-privileged user run arbitrary code","impact":"high","summary":"Adobe Connect has an SQL injection flaw that lets an attacker with a low-privilege account run arbitrary SQL commands. The description says this can lead to arbitrary code execution in the current user's context and to elevated access or control of the victim's account or session.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["adobe-connect"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"attacker runs arbitrary SQL and may gain elevated control","analyst_note":"Find the affected Adobe Connect versions and Adobe's fixed release in Adobe's security bulletin; the NVD entry gives no product ranges.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations that run Adobe Connect for meetings and webinars are the ones exposed. The sources do not name affected versions or the configuration that makes an installation vulnerable. Teams that do not run Adobe Connect can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.00069,"input_tokens":4606,"output_tokens":458,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the affected Adobe Connect versions and Adobe's fixed release in Adobe's security bulletin; the NVD entry gives no product ranges.","search":"'-121894':24A,27A,60B '-191':21A,44B '-2026':23A,26A,59B '-89':54B '10':46B '2026':47B '9.9':62B 'access':142C 'account':149C 'adob':1A,31B,41B,56B,63B,81B,92C 'adobe':28A 'adobe-connect':30B 'affect':95C 'apsb26':20A,43B 'arbitrari':78B,115C,136C 'attack':129C 'awar':86B 'chang':74B,163C 'code':16A,79B,116C 'command':107C,138C 'connect':2A,29A,32B,57B,93C 'context':120C 'control':144C 'could':112C,130C 'critic':50B 'current':123C 'cve':22A,25A,58B 'cvss':61B 'cwe':53B 'element':102C 'elev':141C 'execut':17A,80B,117C,135C 'exploit':88B,131C,152C 'fix':18A,48B 'gain':140C 'host':35B 'impact':75B 'improp':98C 'inject':6A,38B,52B,109C 'interact':72B,160C 'issu':155C 'lead':14A 'log':10A 'logged-in':9A 'low':68B,127C 'low-privileg':126C 'network':67B 'neutral':99C 'nov':45B 'potenti':139C 'privileg':69B,128C 'rate':77B 'requir':158C 'result':113C 'say':82B 'scope':73B,161C 'self':34B 'self-host':33B 'session':151C 'special':101C 'sql':5A,37B,51B,106C,108C,137C 'sql-inject':36B 'use':103C 'user':12A,71B,124C,159C 'vector':65B 'vendor':39B 'victim':147C 'vulner':110C,133C 'wild':91B 'window':4A,40B","nicknames":[],"mitigations":[],"who_affected":"Teams running Adobe Connect on Windows, version 12.12 or earlier, per Adobe's APSB26-191. An attacker needs a low-privilege Connect account; no user interaction is needed. The bulletin does not say whether Adobe-hosted Connect needed action.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:32:32Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":2993},"products":{"at":"2026-11-10T22:32:32Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":2993},"how_to_check":{"at":"2026-11-10T22:32:32Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":2993},"who_affected":{"at":"2026-11-10T22:32:32Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","run_id":2993}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobeconnect","connect"],"ptokens":["adobe","connect"],"labels":["adobeconnect","critical","selfhosted","sqlinjection","vendor","windows"],"campaign_type":null,"search_a":"'-121894':24A,27A '-191':21A '-2026':23A,26A 'adob':1A 'adobe':28A 'apsb26':20A 'code':16A 'connect':2A,29A 'cve':22A,25A 'execut':17A 'fix':18A 'inject':6A 'lead':14A 'log':10A 'logged-in':9A 'sql':5A 'user':12A 'window':4A","search_b":"'-121894':60B '-191':44B '-2026':59B '-89':54B '10':46B '2026':47B '9.9':62B 'adob':31B,41B,56B,63B,81B 'adobe-connect':30B 'apsb26':43B 'arbitrari':78B 'awar':86B 'chang':74B 'code':79B 'connect':32B,57B 'critic':50B 'cve':58B 'cvss':61B 'cwe':53B 'execut':80B 'exploit':88B 'fix':48B 'host':35B 'impact':75B 'inject':38B,52B 'interact':72B 'low':68B 'network':67B 'nov':45B 'privileg':69B 'rate':77B 'say':82B 'scope':73B 'self':34B 'self-host':33B 'sql':37B,51B 'sql-inject':36B 'user':71B 'vector':65B 'vendor':39B 'wild':91B 'window':40B","search_c":"'access':142C 'account':149C 'adob':92C 'affect':95C 'arbitrari':115C,136C 'attack':129C 'chang':163C 'code':116C 'command':107C,138C 'connect':93C 'context':120C 'control':144C 'could':112C,130C 'current':123C 'element':102C 'elev':141C 'execut':117C,135C 'exploit':131C,152C 'gain':140C 'improp':98C 'inject':109C 'interact':160C 'issu':155C 'low':127C 'low-privileg':126C 'neutral':99C 'potenti':139C 'privileg':128C 'requir':158C 'result':113C 'scope':161C 'session':151C 'special':101C 'sql':106C,108C,137C 'use':103C 'user':124C,159C 'victim':147C 'vulner':110C,133C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:18:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121894","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121894","severity":null,"published_at":"2026-11-10T22:18:26+00:00","modified_at":"2026-11-10T22:18:26+00:00","first_seen_at":"2026-11-10T22:27:27+00:00","fetched_at":"2026-11-10T22:27:27+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121894:2993","url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","severity":null,"published_at":"2026-11-10T22:32:32+00:00","modified_at":"2026-11-10T22:32:32+00:00","first_seen_at":"2026-11-10T22:32:32+00:00","fetched_at":"2026-11-10T22:32:32+00:00","note":"Read Adobe APSB26-191 (Nov 10 2026): CVE-2026-121894 SQLi, CVSS 9.9 AV:N/PR:L/S:C, arbitrary code execution; Connect 12.12 and earlier on Windows; not exploited per Adobe. No PoC/social searched.","cites":["https://www.adobe.com/trust/security/products/connect/apsb26-191.html"]}],"documents":[{"id":119650,"url":"https://www.adobe.com/trust/security/products/connect/apsb26-191.html","title":"APSB26-191 Security update available for Adobe Connect","kind":"advisory","source":"analyst","publisher":null,"text":"Adobe priority 2 update, Nov 10 2026. Affected: Adobe Connect 12.12 and earlier, Windows. Updated versions: 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a. CVE-2026-121354: Path Traversal CWE-22, impact listed by Adobe: arbitrary code execution, critical, CVSS 9.9 AV:N/AC:L/PR:L/UI:N/S:C. Credit: edra. Adobe not aware of exploits in the wild.","published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}